Ledger / Oct 2026
AiPT-67 'CyberCartel' builds CARLIY0S on PentAGI against Latin American banks
Confirmed
Straiker, as primary investigator, describes the framework and models; exact publication date was not confirmed.
Straiker says the group moved from manual hacking to CARLIY0S, built on PentAGI, using several commercial models for different attack stages and custom MCP servers bridging LLMs to Burp Suite.
“the group has moved from manual hacking and script-based automation to a decentralized attack system named CARLIY0S, built on the PentAGI autonomous offensive framework”Straiker
Sources
- CARLIY0S: CyberCartel's AI Attacks on Latin American BanksStraiker · 22 Oct 2026 · primary source
- Date
- Oct 2026
- Disclosed
- 22 Oct 2026
- Actor
- AiPT-67 (CyberCartel) (criminal), as attributed by Straiker
- Targets
- Latin American banks and financial institutions (title cites 400+)
- What the AI did
- Recon, Exploit dev, Agentic intrusion, Ops automation
- Model
- Kimi, Claude Sonnet, Claude Opus, Grok
- Model family
- Unspecified, Anthropic, xAI
- Model basis
- stated by researcher
- Autonomy
- semi-autonomous
- Outcome
- Straiker reports a decentralized AI attack system run against hundreds of institutions; impact details not independently verified here.