Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks

Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek via the open-source Hermes Agent framework, instructed over Telegram, to launch autonomous attacks. The agent scanned for internet-facing systems, selected public exploits, and was intercepted while attempting to compromise 1,200+ hosts for proxyjacking.