Overview

• Straiker reports observing the framework in active use on VirusTotal, indicating that AI-orchestrated attack tooling is already being deployed.
• Villager was published on PyPI in late July by user “stupidfish001,” linked to HSCSEC, and is attributed to the China-based group Cyberspike, accumulating roughly 10,000–11,000 downloads across major platforms.
• The tool operates as an MCP client that leverages LangChain and DeepSeek models, coordinates via FastAPI, and draws on a library of 4,201 prompts to plan and execute tasks.
• Ephemeral Kali Linux containers self-destruct within 24 hours and use randomized SSH ports, a design that complicates detection, forensics, and attribution.
• Researchers warn the framework repackages elements resembling AsyncRAT with plugins for tools like Mimikatz, raising the risk of Cobalt Strike–style misuse by less-skilled actors.