本週網路安全大事件：Interpol 破獲 1,462 名網路罪犯、AI 供應鏈攻擊加速、PHP RCE 漏洞緊急修補

好事 | 法院判刑稅務欺詐犯，國際刑警組織擾亂非洲網路犯罪，前 AI 工程師面臨竊聽指控

美國地方法院已 判刑 奈及利亞國民 Chukwuemeka Victor Amachukwu 八年監禁，因對稅務準備公司發動 針對性網路釣魚 攻擊。其在 引渡 後，Amachukwu 已對電腦入侵與電信詐欺指控認罪。

2019 至 2021 年，他與共謀者入侵多個美國州的會計網路，盜取至少 800 名客戶的稅務及 個人可識別資訊（PII）。他們亦提交偽造稅表與災難貸款申請，盜走 超過 330 萬美元。法院判定 Amachukwu 受監督釋放一年，並命令其償還 360 萬美元賠償金，沒收近 1100 萬美元。

本週，國際刑警組織協調 塞倫吉蒂三號行動，與 21 個國家及私人部門 合作夥伴 共同擾亂非洲網路犯罪網路，犯罪型別從 商業電子郵件妥協（BEC）到各種詐騙。 

於 2026 年 6 月至 8 月執行的聯合打擊，導致 1,462 起逮捕、拆除 10,909 個惡意基礎設施，並追回超過 1,0500 萬美元的非法收益。整體調查共辨識 65,929 名受害者，估計損失超過 3.85 億美元。 

最後，美國法官已 下令拘押前 OpenAI 工程師 Abdulrahman Alfozan，指控其於公司舊金山辦公室涉嫌企業 間諜活動。檢方透露，這位沙烏地國民在執行長會議室安裝定製加密錄音裝置，試圖捕捉敏感企業對話。 

調查 檔案揭露 Alfozan 與沙烏地王室成員之間頻繁加密通訊，企圖招募其參與國家 AI 計畫。聯邦特工於其預定前往沙烏地阿拉伯單程航班前數日逮捕 Alfozan，若定罪，最高可面臨五年監禁。

壞事 | 與中國有關的行為者使用代理 AI 於雲端供應鏈攻擊

一名疑似與中國國家相關的威脅行為者已 利用 代理 AI 框架，對 ConnectWise 雲備份發動 供應鏈 破壞，並自動化攻擊數百家全球組織。 

自 2021 年起活躍，並歷史上依賴僵屍網路基礎設施進行迴避式 密碼噴射，該組織曾使用 ARTEX，一個基於 Go 的多代理 LLM 侵入測試系統，以機器速度執行攻擊。透過部署全天候運作的 AI 代理，威脅行為者將從初始目標到取得特權雲端存取的時間縮短至多個目標環境下不到三小時。

該行為者利用 ARTEX 自動化掃描、偵測、密碼噴射及 OAuth 應用濫用，覆蓋廣泛領域，包括航空航天、國防、能源、金融服務、政府及科技。 

Between October 10 and October 14, 2026, the attackers launched an automated cross-tenant password-spray campaign from dedicated infrastructure, generating over 151,000 failed logon events that peaked on October 11 at 2,900 failures per minute. Then on October 15, the AI agents acquired control of identities associated with multiple ConnectWise cloud applications, using pre-granted permissions to authenticate to downstream Microsoft 365 customer environments without requiring interactive user logins.

Once authenticated, the agents ran Microsoft Graph operations to perform directory reconnaissance, alter privileged roles, and modify application credentials. By adding unauthorized credentials to existing OAuth applications, the AI agents established persistent backdoors that remain active even after remediating the primary backup software. 

The campaign saw ARTEX attempt sign-ins across more than 2,250 tenants, narrowing the response window. In response to the intrusion, ConnectWise has temporarily suspended services to isolate infrastructure and implement containment measures.

The Ugly | PHP Drops Urgent Fixes for 'PHP2Shell' RCE Flaws Targeted Before Disclosure

Emergency security updates came from the PHP security team this week to patch two critical remote code execution (RCE) vulnerabilities, collectively tracked as “PHP2Shell”, that affect core PHP runtimes across enterprise web servers. Rated CVSS 9.2 and identified as CVE-2026-109618 and CVE-2026-109619, the flaws stem from memory management and error handling defects when requests terminate unexpectedly. 

The vulnerabilities impact all PHP installations serving web traffic, including Apache with mod_php, PHP-FPM, and php-cgi, as well as FrankenPHP and LiteSpeed. Risk is particularly severe on mod_php servers, where unauthenticated requests trigger memory corruption before any application code executes, rendering content management system security controls ineffective against initial exploitation.

The emergency releases (PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35) followed advance warnings triggered when technical details leaked online prior to coordinated disclosure. Amazon Threat Intelligence detected exploitation probes targeting honeypots beginning October 17, four days before official patches were published. The early probe activity indicates that threat actors acquired vulnerability details while the security flaws remained under embargo. 

The underlying weakness had gone unresolved for two years: a 2024 audit flagged the same out-of-memory condition but couldn’t prove it was exploitable. AI-assisted auditing under OpenAI’s “Patch the Planet” program changed that, turning the long-standing weakness into confirmed working remote code execution.

PHP states that applying runtime updates is the only complete fix. Interim configurations, such as disabling session upload progress or restricting memory limits, only partially close specific attack paths.

While patching remains the primary control, SentinelOne Singularity agents detect post-exploitation behavior at the operating system level, identifying when web worker processes spawn system shells, write web shells into document roots, or initiate unauthorized outbound network connections.