Kazakhstan-linked hackers used AI agent to spy on Central Asian governments
State-sponsored threat actors linked to Kazakhstan utilized an autonomous AI agent to conduct espionage operations and infiltrate critical infrastructure across Central Asia. The campaign resulted in the theft of sensitive government documents.
why this severityConfirmed espionage campaign against government targets.
- first report
- 12 Nov 2026
- last update
- 12 Nov 2026
Timeline · 1
Sources · 1
News and write-ups
- 2026-11-12Kazakhstan-linked hackers used AI agent to spy on Central Asian governmentsThe Record · therecord.media/kazakhstan-hackers-central-asia
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- AI-enabled attack
- categories
- AI-assisted intrusion
- severity
- 3 · Confirmed exploitation
- targets
- Not applicable
- owasp llm top 10
- no entry for these categories
- mitre atlas
- no technique for these categories
- dates
- happened 12 Nov 2026 · first reported 12 Nov 2026
- origin
- News & research feeds
- record
- confidence 0.90 · created 2026-11-12 13:11Z · updated 2026-11-12 13:11Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Kazakhstan-linked hackers used AI agent to spy on Central Asian governments https://gcdradar.vercel.app/incidents/kazakhstan-linked-hackers-used-ai-agent-to-spy-on-central-as · AIR-2026-1927 · live - Lane: Breaches & attacks - Severity: 3 (Confirmed exploitation): Confirmed espionage campaign against government targets. - Fix status: No fix needed - First reported: 2026-11-12 - AI role: AI-enabled attack ## Summary State-sponsored threat actors linked to Kazakhstan utilized an autonomous AI agent to conduct espionage operations and infiltrate critical infrastructure across Central Asia. The campaign resulted in the theft of sensitive government documents. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-11-12: Kazakhstan-linked hackers used AI agent to spy on Central Asian governments (https://therecord.media/kazakhstan-hackers-central-asia) ## Sources - 2026-11-12 The Record: Kazakhstan-linked hackers used AI agent to spy on Central Asian governments https://therecord.media/kazakhstan-hackers-central-asia Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- liveArcticRAT ArcticRAT Cybercrime Gang Profiles Victim Finances With AI
Breaches & attacks · Exploited · since 13 Nov 2026
AI - liveCairn Attackers breached 10 organizations using the open‑source AI pentest framework Cairn
Breaches & attacks · Real loss · since Aug 2026 (approx.)
AI - liveCredential stuffing campaign spoofs consumer AI agent traffic
Breaches & attacks · Exploited · since Oct 2026 (approx.)
AI - liveStinging the Swarm: Extracting Attacker Intelligence from a Twin-Controller OT Honeypot
Research · since 11 Nov 2026
AI - liveAntiFox Hackers use AntiFox AI agents in AWS credential‑theft attacks
Breaches & attacks · Exploited · since 11 Nov 2026
AI - liveAWS Validating AI‑Discovered Cloud Threats on Live Infrastructure: A Multi‑Model, Multi‑Cloud Study
Research · since 10 Nov 2026
AI