Reports from two sources indicate that the China-linked threat actor UAT-10147 used AI tools including DeepSeek to automate aspects of attacks on servers, including those in Taiwan. The operations involved deployment of tools such as SPECTRE with EDR bypass capabilities and a Linux rootkit. Attribution and the degree of true autonomy remain points of technical debate.