Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records

A Taiwan-based individual leveraged a custom AI agent framework called BOSSAI to conduct cyber espionage operations targeting emergency services, universities, banks, and government systems across at least 11 countries. The attacker used locally hosted, safety-removed ('abliterated') AI models—primarily DeepSeek, GLM, and Qwen—to power 12 AI agents, nine of which were actively used for reconnaissance, exploitation, and infrastructure management. The operation successfully exfiltrated emergency dispatch records from Taipei, patient data from a fire department platform, and personal data from a Taiwanese lender and multiple Thai universities via SQL injection. The attacker's infrastructure was exposed due to operational security failures, including reused identities and an exposed home IP address in SSH logs.

AI-extracted · verify before operational use