You Had Me at "Hello": A Chinese‑Language Framework Targeting AI Infrastructure

Era researchers observed a Chinese-language exploitation framework they named Greeter attacking seven Flowise honeypots across four regions from July to October 2026, using the overrideConfig code injection flaw CVE-2024-58351 to execute commands via chat messages that each read only "hello". The 12-step chain included host reconnaissance, cloud metadata probing, credential discovery, persistence attempts and fileless execution staging, with commands arriving 3.5 seconds apart. A Shodan query found 4,372 internet-exposed Flowise instances, of which 703 of 3,277 version-identifiable hosts had no authentication enabled and 46 appeared to share the vulnerable conditions recreated in the honeypots.