gcdRadar
closedclosed 13 Sep 2026Breaches & attacks3 Confirmed exploitationAI

Multi-Agent Framework Compromises Taiwanese Government Systems

Hermes, OpenClaw

Threat actors deployed a multi-agent framework built on Hermes and OpenClaw in attacks against Taiwanese government systems. Investigators recovered operational workspaces documenting multiple attack waves.

first report
30 Aug 2026
last update
30 Aug 2026

Timeline · 4

  1. 30 Aug 2026Multi-Agent Framework Compromises Taiwanese Government Systems
  2. 30 Aug 2026Inside a Multi-Agent AI Framework Used to Compromise Government Entities in Asia
  3. 30 Aug 2026Overseas hackers launch AI-agent attacks against government agencies; MODA activates coordinated response and strengthens cyber defenses
  4. 30 Aug 2026China-linked hackers hit Taiwan in unprecedented 'autonomous' AI cyber attack

Sources · 4

News and write-ups

  1. 2026-08-30
    Inside a Multi-Agent AI Framework Used to Compromise Government Entities in Asia
    dreamgroup.com · dreamgroup.com/blog/inside-a-multi-agent-ai-framework-used-to-compromise-governm
  2. 2026-08-30
  3. 2026-08-30
    China-linked hackers hit Taiwan in unprecedented 'autonomous' AI cyber attack
    Financial Times · ft.com/content/7d2ab3e0-9085-48f6-b38a-d90260d58795

Research and catalogues

  1. 2026-08-30
    Multi-Agent Framework Compromises Taiwanese Government Systems
    MITRE ATLAS · atlas.mitre.org/studies/AML.CS0071

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
AI-enabled attack
categories
AI-assisted intrusion
severity
3 · Confirmed exploitation
targets
Framework / tooling
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 1 Jul 2026 · first reported 30 Aug 2026
origin
MITRE ATLAS
Derived from MITRE ATLAS (Apache 2.0, © MITRE).
record
confidence 0.95 · created 2026-10-18 06:55Z · updated 2026-10-18 06:55Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Multi-Agent Framework Compromises Taiwanese Government Systems

https://gcdradar.vercel.app/incidents/multi-agent-framework-compromises-taiwanese-government-syste · AIR-2026-0362 · closed 2026-09-13

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2026-08-30 (happened 2026-07-01)
- AI role: AI-enabled attack
- Products: Hermes, OpenClaw

## Summary

Threat actors deployed a multi-agent framework built on Hermes and OpenClaw in attacks against Taiwanese government systems. Investigators recovered operational workspaces documenting multiple attack waves.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-08-30: China-linked hackers hit Taiwan in unprecedented 'autonomous' AI cyber attack (https://ft.com/content/7d2ab3e0-9085-48f6-b38a-d90260d58795)
- 2026-08-30: Overseas hackers launch AI-agent attacks against government agencies; MODA activates coordinated response and strengthens cyber defenses (https://moda.gov.tw/ACS/press/news/press/20394)
- 2026-08-30: Inside a Multi-Agent AI Framework Used to Compromise Government Entities in Asia (https://dreamgroup.com/blog/inside-a-multi-agent-ai-framework-used-to-compromise-government-entities-in-asia)
- 2026-08-30: Multi-Agent Framework Compromises Taiwanese Government Systems (https://atlas.mitre.org/studies/AML.CS0071)

## Sources

- 2026-08-30 MITRE ATLAS: Multi-Agent Framework Compromises Taiwanese Government Systems https://atlas.mitre.org/studies/AML.CS0071
- 2026-08-30 dreamgroup.com: Inside a Multi-Agent AI Framework Used to Compromise Government Entities in Asia https://dreamgroup.com/blog/inside-a-multi-agent-ai-framework-used-to-compromise-government-entities-in-asia
- 2026-08-30 moda.gov.tw: Overseas hackers launch AI-agent attacks against government agencies; MODA activates coordinated response and strengthens cyber defenses https://moda.gov.tw/ACS/press/news/press/20394
- 2026-08-30 Financial Times: China-linked hackers hit Taiwan in unprecedented 'autonomous' AI cyber attack https://ft.com/content/7d2ab3e0-9085-48f6-b38a-d90260d58795

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    Hermes Suspected Hackers Used AI Agents to Compromise Taiwanese Systems

    Breaches & attacks · Real loss · since 1 Jul 2026

    AI
  2. closed
    AI
  3. closed
    DeepSeek Threat Actor Uses DeepSeek-Powered Hermes Agent for Exploitation

    Breaches & attacks · Exploited · since 7 May 2026

    AI
  4. closed
    AI
  5. closed
    AI
  6. closed
    AI