INTEL_REPORT
arXiv — Cryptography & Security (cs.CR) · published 5/15/2026, 4:00:00 AM · TLP amber
Summary
Ingested excerpt (first ~500 chars of normalized text).
Characterizing AI-Assisted Bot Traffic in Darknet Data: Implications for ICS and IIoT Security arXiv:2605.14209v1 Announce Type: new Abstract: The rise of automated scanning tools and AI assisted reconnaissance agents has significantly altered internet background traffic patterns, threatening the baseline assumptions underlying intrusion detection systems (IDS) deployed in critical infrastructure networks. This paper characterizes the evolution of automated bot traffic by an…
https://arxiv.org/abs/2605.14209
sha256:528cd97c0cc180855644ff1110f693ee43bbcd69b0735a5e8d8da8d95c7c04ff
What we pulled out
Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).
Indicators
Linked with report → mentions → indicator. Values open the indicator workspace.
No indicators linked for this report.
Malware families
Allowlist token matches only.
Threat actors mentioned
Allowlist mentions — not a formal attribution verdict.
ATT&CK techniques
MITRE IDs referenced in text and present in local technique table.
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Browse the report corpus.