Cybersecurity News
Filters
Filtered by tag: intrusion × Clear
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
Matched: Artificial Intelligence
Researchers found AI-driven attack infrastructure used by affiliates of INC and The Gentlemen ransomware groups. The system, called Phantom, operates as an autonomous red team kill chain framework. The threat actor is believed to be Russian-speaking and acts as both an intrusion operator and data extortion service, using AI agents to automate cyberattacks end-to-end.