{
 "id": "AIR-2026-0331",
 "slug": "ai-powered-espionage-campaign-targets-government-linux-infra",
 "title": "AI-powered espionage campaign targets government Linux infrastructure",
 "summary": "Threat actors deployed an AI-assisted espionage campaign targeting government Linux infrastructure with custom malware and web shells. The operation utilized AI tooling to facilitate reconnaissance and execution.",
 "type": "ai_enabled_attack",
 "categories": [
  "ai_assisted_intrusion"
 ],
 "severity": 3,
 "targets": [
  "enterprise_deployment"
 ],
 "products": [
  "Linux infrastructure"
 ],
 "incident_date": "2026-10-15",
 "incident_date_precision": "day",
 "first_reported": "2026-10-15",
 "sources": [
  {
   "url": "https://unit42.paloaltonetworks.com/ai-campaign-targets-linux-infrastructure",
   "publisher": "Unit 42",
   "title": "AI-Powered Espionage Campaign Targets Government Linux Infrastructure",
   "published_at": "2026-10-15"
  }
 ],
 "source_count": 1,
 "confidence": 0.9,
 "status": "published",
 "origin": "news",
 "tags": [
  "espionage",
  "linux",
  "malware",
  "webshell"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}
