Hermes AI agent used to automate attack on Thai Finance Ministry

A threat actor used the open-source Hermes AI agent from Nous Research in YOLO mode to automate post-exploitation during a breach of Thailand's Ministry of Finance. Hunt.io and researcher Bob Diachenko recovered 585 files and 470 MB of attack tooling. The operator exploited the ministry's Hadoop cluster, which accepts any password by default, and staged a custom Go implant called Hades.