GCD AI RADAR
incidents/AIR-2026-0362

Multi-Agent Framework Compromises Taiwanese Government Systems

AI-enabled attack3 Confirmed exploitationAI-assisted intrusion

Threat actors deployed a multi-agent framework built on Hermes and OpenClaw in attacks against Taiwanese government systems. Investigators recovered operational workspaces documenting multiple attack waves.

Details

type
AI-enabled attack
Attackers used AI as a meaningful part of a cyberattack against someone else.
categories
  • AI-assisted intrusion
    Threat actors using AI tooling in reconnaissance, exploitation, lateral movement or operations.
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
Both rows are derived from the type and categories (OWASP 2025 edition, ATLAS release 2026.09), not classified per record. How
severity
3 · Confirmed exploitation
Used against real targets; limited or unclear impact.
targets
Framework / tooling
products
Hermes, OpenClaw
incident date
1 Jul 2026
first reported
30 Aug 2026
origin
MITRE ATLAS
Derived from MITRE ATLAS (Apache 2.0, © MITRE).
classifier confidence
0.95 · published at or above 0.80; see the methodology
tags
multi-agent · hermes · openclaw · taiwan
record
created 2026-10-18 06:55Z · updated 2026-10-18 06:55Z · json

Sources · 4

  1. 2026-08-30
    Multi-Agent Framework Compromises Taiwanese Government Systems
    MITRE ATLAS · atlas.mitre.org/studies/AML.CS0071
  2. 2026-08-30
    Inside a Multi-Agent AI Framework Used to Compromise Government Entities in Asia
    dreamgroup.com · dreamgroup.com/blog/inside-a-multi-agent-ai-framework-used-to-compromise-governm
  3. 2026-08-30
    Overseas hackers launch AI-agent attacks against government agencies; MODA activates coordinated response and strengthens cyber defenses
    moda.gov.tw · moda.gov.tw/ACS/press/news/press/20394
  4. 2026-08-30
    China-linked hackers hit Taiwan in unprecedented 'autonomous' AI cyber attack
    Financial Times · ft.com/content/7d2ab3e0-9085-48f6-b38a-d90260d58795

Titles and links belong to their publishers. The summary above is written by GCD AI RADAR in its own words; data is CC BY-SA 4.0.

Related incidents