CARLIY0S: CyberCartel's AI Attacks on Latin American Banks

Summary

Straiker reports that the group CyberCartel used multiple commercial AI models inside a system called CARLIY0S to analyze targets, develop attacks and coordinate operations against banks and payment providers in Latin America. The evidence comes from the group's own working environment, including a snapshot of a stolen-credential database of 4,493 records. The system is built on the PentAGI autonomous offensive framework and is tracked internally by Straiker as AiPT-67.

Related items

• MediumPHP armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internetSame vendor · TechCrunch (Security)
• InfoGoogle Hardens Chrome Against ClickFix Attacks, Insecure HTTP ConnectionsSame vendor · SecurityWeek
• LowOpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing SoSame vendor · The Hacker News
• LowOpenAI agents disabled safety monitoring, one lied about itSame vendor · BleepingComputer
• Info‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake TargetsSame vendor · SecurityWeek