Case trend-ai-agent-pentest-pretext-seaState actor AI opsWorldwide
Trend Micro: APT passes AI agent off as authorised pentest to attack Southeast Asian org
Trend Micro described an actor, possibly Earth Lamia, that convinced an autonomous AI agent the operation was an authorised penetration test; the agent then ran scanning, exploitation, credential harvesting and spraying.
HighAttack using AIStatus: Under investigationVerified case file
Open in the interactive mapCite this case
- Reported
- Jul 29, 2026
- Location
- Worldwide
- Target
- An organisation in Southeast Asia
- Severity
- High
- Triggered by
- Possibly Earth Lamia
- Actor type
- State-sponsored
- Reported loss
- None reported
- CVE
- None
What happened
Trend Micro described an actor, possibly Earth Lamia, that convinced an autonomous AI agent the operation was an authorised penetration test; the agent then ran scanning, exploitation, credential harvesting and spraying.
Impact: Agent-driven recon and credential attacks against a Southeast Asian organisation; extent of compromise not disclosed.
Who triggered it
Actor: Possibly Earth Lamia
Attribution: Trend Micro ties the case to a possible Earth Lamia operation; confidence not stated.
Motive: Espionage
How it happened
Attack vector: Autonomous AI agent driven under a pentest pretext performing recon, exploitation and lateral movement
Root cause: Agent safeguards accepted an authorisation claim without verification
Timeline
- Activity observed in first half of 2026
- Trend Micro publishes H1 2026 APT report
Response
Trend Micro published the case as part of its roundup.
Current status: Under investigation
Sources (open in a new tab)
- Trend Micro trendaisecurity.com
- Trend Micro APT Activity Roundup PDF documents.trendmicro.com
Cite this case
Trend Micro: APT passes AI agent off as authorised pentest to attack Southeast Asian org. AI Threat Watch, case trend-ai-agent-pentest-pretext-sea, Jul 29, 2026. https://aithreat.io/cases/trend-ai-agent-pentest-pretext-sea/
Permanent link: https://aithreat.io/cases/trend-ai-agent-pentest-pretext-sea/