# AI-Powered Hacking Campaigns Escalate Across Latin America: Two Threat Groups Deploy Automated Attack Chains Against Governments and Financial Institutions


Threat actors in Latin America have begun leveraging artificial intelligence agents to orchestrate entire cyberattack campaigns—from reconnaissance and initial access through to custom tool generation and data exfiltration. New research from Trend Micro's TrendAI Research team has identified two distinct regional campaigns utilizing this emerging attack methodology, collectively compromising at least a dozen government and private sector entities across Mexico and Brazil.


## The Threat: AI-Enabled Attack Automation in the Wild


Two coordinated but distinct campaigns have emerged:


  • Shadow-Aether-040: A Spanish-speaking threat actor group targeting Mexican government entities and organizations in financial services, aviation, and retail. The campaign was first identified in late 2025, with documented compromises between December 27 and January 4.

  • Shadow-Aether-064: Likely operated by Brazilian Portuguese speakers, this campaign emerged in April 2026 with a primary focus on Brazilian financial institutions, aiming to exfiltrate sensitive financial data.

    • Both campaigns share a critical commonality: they employ AI agents throughout their entire attack chain—from generating pretexts and crafting social engineering content to creating custom penetration testing tools adapted specifically to each target environment.


    This represents a significant evolution in automated cyberattacks. Rather than relying on pre-built tool kits or manual coding, these actors leverage large language models and AI agents to generate weaponized tools in real-time, adapted to target-specific defenses and network architectures.


    ## Background and Context: The Rise of "Vibe-Hacking"


    The term "vibe-hacking" (or vibe-coded hacking) describes a sophisticated approach where threat actors leverage jailbroken AI models to generate functional attack code and frameworks without pre-existing toolsets. Instead of downloading tools from repositories or using open-source frameworks, attackers prompt AI systems to generate custom code designed for their specific targets.


    This methodology addresses a key vulnerability in traditional detection systems: most defensive tools are trained to identify known malware, exploitation frameworks, and attack patterns. When tools are generated dynamically and uniquely for each target, signature-based detection becomes significantly less effective.


    Why this matters:

  • Custom-generated tools evade most endpoint detection and response (EDR) platforms
  • Each victim receives a unique variant, complicating incident response and forensic analysis
  • Attack speed increases dramatically—what might take weeks to manually code takes minutes with AI assistance
  • Operational barriers to entry lower substantially; attackers need fewer specialized coding skills

    • ## Technical Details: How the Campaigns Operated


    ### Shadow-Aether-040 Attack Chain


    TrendAI researchers gained visibility into Shadow-Aether-040's operations after identifying the command-and-control (C2) infrastructure used in the campaign. The C2 server exhibited significant operational security (OPSEC) failures, allowing researchers to observe the complete attack methodology.


    The attack progression typically followed this sequence:


    1. AI-Assisted Reconnaissance: Threat actors used AI agents to research target organizations, identifying key personnel, network architecture, and potential vulnerabilities through open-source intelligence gathering.


    2. Pretexting and Social Engineering: AI generated convincing phishing emails and pretexts tailored to specific organizational contexts—leveraging knowledge of industry-specific terminology, recent news events, and organizational structures.


    3. Initial Access: Once credentials were compromised through phishing or social engineering, attackers gained foothold access using conventional methods (VPN, exposed RDP, compromised web applications).


    4. Post-Compromise AI Tools: Following initial access, threat actors used AI agents to generate custom penetration testing tools adapted to the target's environment. These tools included:

    - Network enumeration scripts

    - Credential harvesting utilities

    - Lateral movement frameworks

    - Data exfiltration mechanisms


    5. Data Theft: The campaign concluded with targeted data exfiltration focused on government administrative data, financial records, and organizational intelligence.


    Researchers confirmed six government entities in Mexico were successfully compromised during the December-January period, with data theft occurring in multiple instances.


    ### Shadow-Aether-064: The Brazilian Financial Focus


    Shadow-Aether-064 emerged as a distinct campaign with similar tooling and AI-centric methodology but different targeting and operational tempo. This campaign focused exclusively on Brazilian financial institutions, suggesting either a different sponsorship model or distinct financial motivations.


    The campaign's operational pattern mirrored Shadow-Aether-040's approach but with optimizations for financial sector targeting:

  • Automated scanning for financial management systems
  • AI-generated credential stuffing utilities
  • Custom frameworks for extracting banking transaction records
  • Exfiltration focused on customer financial data and internal banking intelligence

    • TrendAI assessed the two campaigns as possibly distinct operations, despite shared tooling and methodology, based on language analysis (Brazilian Portuguese vs. Spanish) and targeting divergence.


    ## Implications: Expanding Attack Surface and Accelerated Threat Evolution


    ### For Government Agencies


    Government entities across the Americas face a significantly elevated threat landscape. Traditional security controls—firewalls, intrusion detection systems, and endpoint protection—are less effective against dynamically generated, unique attack tools.


    Critical vulnerabilities exposed:

  • Legacy credential management systems lack the sophistication to prevent AI-generated phishing attacks
  • Network segmentation in many government agencies remains incomplete, enabling lateral movement
  • Incident response capabilities are often underfunded and understaffed, unable to handle AI-accelerated attack timelines

    • ### For Financial Institutions


    Financial organizations face double jeopardy: both as primary targets and as potential attack vectors. Compromised financial systems can be weaponized to target other sectors, and financial data theft directly enables follow-on fraud and identity theft operations.


    ### Broader Industry Impact


    The success of these campaigns signals a maturation point in AI-enabled cybercrime. As AI tools become more accessible and sophisticated, the barrier to executing large-scale, multi-target campaigns continues to lower. Organizations that previously required nation-state-level resources can now operate with minimal technical expertise—effectively outsourcing technical execution to AI agents.


    ## Defending Against AI-Accelerated Attack Chains


    ### Immediate Actions


    For government and financial institutions:


  • Credential security hardening: Implement passwordless authentication, hardware security keys, and multi-factor authentication with phishing-resistant mechanisms (FIDO2 standards)
  • Network micro-segmentation: Isolate critical systems and data repositories; assume perimeter compromise is inevitable
  • AI-enabled detection: Deploy behavioral analytics and machine learning-based detection systems that can identify anomalous AI-generated code execution patterns
  • Incident response acceleration: Establish dedicated rapid-response teams with authority to isolate compromised systems within minutes, not hours

    • ### Medium-Term Strategic Measures


    | Control | Purpose | Implementation |

    |---------|---------|-----------------|

    | Email gateway AI filtering | Detect AI-generated phishing with higher accuracy than signature matching | Deploy models trained on AI-generated pretexts and social engineering patterns |

    | Code execution sandboxing | Isolate unknown binaries in execution environments before allowing system access | Implement application whitelisting and containerized execution for suspicious processes |

    | Threat intelligence sharing | Distribute indicators of compromise and attack patterns across sector peers | Participate in regional information sharing organizations and ISACs |

    | Security awareness refinement | Train employees to recognize AI-generated social engineering (which often appears more sophisticated) | Conduct scenario-based training on AI-generated attack patterns |


    ### Threat Hunting Priorities


    Security teams should prioritize hunting for:

  • Unusual outbound connections to commodity AI services or API endpoints
  • Execution of recently created, zero-signature binaries
  • Abnormal command-line activity consistent with reconnaissance and lateral movement
  • Credential usage patterns inconsistent with normal employee behavior

    • ## HackWire Analysis


    This campaign represents a critical inflection point in the democratization of cybercrime. Previous high-sophistication operations required nation-state sponsorship, organized crime networks, or elite technical teams. The emergence of AI-enabled attack chains means that moderately resourced threat actors can now orchestrate attacks of equivalent complexity—and with superior operational security, since custom-generated tools evade most defensive signatures.


    The timing is particularly concerning: as these campaigns matured in late 2025, global cybersecurity organizations were primarily focused on legacy threats (ransomware, supply chain attacks, zero-days in known software). The shift toward AI-generated attack infrastructure received minimal defensive investment, leaving most organizations dangerously exposed.


    What's most dangerous is the speed advantage. Traditional attack campaigns might take weeks from reconnaissance to tool development to execution. AI-accelerated chains compress this timeline to days or hours. Defenders relying on signature-based detection, behavioral baselines established over months, or incident response playbooks developed for slower-moving threats are fundamentally outmatched.


    The financial sector faces particular risk. Banking systems contain high-value targets (transaction data, customer credentials, fraud capabilities), and financial institutions have historically been less security-mature than government agencies. The focus on Brazil suggests attackers have identified a region where financial institutions possess sufficient resources to contain valuable data but insufficient security sophistication to defend against AI-enabled attacks.


    Organizations should treat this not as a regional Latin American threat but as a proof-of-concept for global deployment. The same techniques and tools will eventually migrate northward to target U.S. and European entities. The defensive advantage lies in preparation now—before these campaigns achieve global scale.


    — *HackWire Editorial*


    ## Related Coverage


  • Read more in our [Breaches](https://www.hackwire.news/category/breaches) coverage
  • Cross-reference with [Vulnerabilities](https://www.hackwire.news/category/vulnerabilities) and [Malware](https://www.hackwire.news/category/malware)
  • Stay current via the [HackWire homepage](https://www.hackwire.news/)