Skip to content
Install MCP

Threat actor

Corsight AI

Last fetched

Corsight AI is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.

Description

Corsight AI is a facial recognition technology company headquartered in Israel with operations worldwide. The company specializes in developing facial recognition and surveillance technology powered by what they call "Autonomous AI," which, according to the company, is based on 15 years of neuroscience research and over 250 patents. Their technology is designed to mimic human facial recognition capabilities. Corsight's technology allegedly identify individuals even when less than 50% of their face is visible. It also provides real-time alerts and video analysis and claims to identify people wearing masks. More recently, it was developing technology to create facial models from DNA. Israel implemented a mass facial recognition program in the Gaza Strip using Corsight AI's technology. The system was deployed at military checkpoints along major evacuation routes where Palestinians were fleeing southward, creating an extensive database of Palestinian civilians without their knowledge or consent. The technology faced notable accuracy challenges, particularly when processing grainy footage or partially obscured faces. One significant case highlighting these accuracy issues involved Palestinian poet Mosab Abu Toha, who was wrongfully detained at a checkpoint in mid-November while attempting to leave Gaza for Egypt with his family. After being flagged by the system as a wanted person, he was held in detention for two days, during which he endured beating and interrogation, before being released back to Gaza without explanation. According to Gizmodo, in 2024 Corsight AI introduced a new surveillance system that monitors "sweethearting" - a practice where retail employees give unauthorized discounts to people they know - by analyzing customer-employee interactions, including physical proximity and visit patterns. The technology, which has already been implemented by unnamed clients, tracks whether customers consistently visit the same employees and triggers security alerts for suspicious patterns. Corsight also announced a partnership with the public school system in Alagoas, a state in Northeastern Brazil, to implement its facial recognition technology in schools. However, the contract raised transparency concerns: while Alagoas had an active agreement with Teltex, a company acting as Corsight's reseller in Brazil, the contract made no mention of Corsight or the facial recognition solution. This practice violates local laws.

Techniques by tactic

No ATT&CK techniques are recorded for Corsight AI in WhisperGraph.

Attributed infrastructure

None published. WhisperGraph carries no ATTRIBUTED_TO edge to Corsight AI today — this states the absence of a published link, not that Corsight AI has no infrastructure.

References

© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Related pages

Pivot from Corsight AI into its techniques, tactics and any attributed infrastructure.

Queries

Resolves the slug to this actor, merging every duplicate node sharing the same name.


MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
       a.references AS references, a.campaigns AS campaigns
LIMIT 25
Run yourself →

Techniques this actor uses, grouped by the tactic each one serves.


MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000
Run yourself →

Infrastructure publicly attributed to this actor.


MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.