UAT-10147: Cybercrime Group Uses Agentic AI to Scale Server Attacks, Deploys SPECTRE Backdoor With Linux Rootkit and Vulnerable-Driver EDR Bypass

Overview On August 20, 2026, Cisco Talos published a two-part report on UAT-10147 — a financially motivated, Chinese-speaking cybercrime group targeting Windows and Linux web servers globally. Victims