🔴 Hackers Turn AI Agent Into a Cyber Weapon After Deleting Its Safety Refusals

A French-speaking cybercrime crew calling itself BlackHatSect0r && DXQRTXX disabled safety controls in a self-hosted AI agent and used the resulting system to automate mass credential harvesting, target discovery, phishing preparation, and attack orchestration.

The internet-exposed server reportedly contained 4.9 GB of material across 9,299 files, including a custom Go-based command-and-control platform named DXSCAN, a vault containing 16,834 harvested credentials, phishing infrastructure, extortion tooling, and operator shell history.

Researchers said the data was reviewed through static analysis, passive observation of the exposed panel, and public-source collection, without executing malware or logging into actor-controlled systems.