The operator of the September 25, 2026 Cairn hacking campaign initiated multi-site attacks using short Chinese-language prompts containing fewer than 100 characters.