DeepSeek v4.1 Flash

Reported Context (2)

motivated by financial gain rather than an established threat group. The assessment identified DeepSeek v4.1 Flash as the primary model, with GLM 5.3 from Zhipu AI and Grok 4.6 serving as backup models. Hunt.io Traces ARTEX Infrastructure Through Exposed Directories and Tooling
The operator used Cairn to run DeepSeek v4.1 Flash through OpenRouter. Sela said a compromise often cost a few dollars. Gambit’s write-up reports an average of $25.46 per completed scan across 101 scans. Conference Recap Highlights AI Agent Attack Risks and Defenses

CVE (2)

People (10)

MITRE ATT&CK (15)

Vendors (7)

Products (11)

Tools (12)

Industries (1)

Countries (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.