AI Agent Drives Espionage Attack on Thai Ministry of Finance

July 28, 2026 · Dark Reading · Severity: MEDIUM

Attackers executed a targeted espionage campaign against a Thai government ministry using an AI agent built on the Hermes open source toolset operating in unrestricted YOLO mode. This configuration gave the agent maximum autonomy without safety guardrails, enabling it to conduct reconnaissance, extract sensitive documents, and maintain persistence within the ministry's network. The incident represents a significant milestone in offensive AI use by state-aligned threat actors, demonstrating that open source AI agent frameworks can be weaponized for intelligence gathering with minimal modification when safety restrictions are deliberately removed.