AI Agents Used by Ransomware Affiliates for Automated Intrusions
Cybersecurity researchers have uncovered an AI-driven intrusion ecosystem utilized by affiliates of the INC and The Gentlemen ransomware groups. This operation leverages an ‘Autonomous Red Team Kill Chain Framework’ named Phantom, which automates various stages of an attack. The threat actor, believed to be Russian-speaking, acts as both an intrusion and data-extortion operator, demonstrating a significant advancement in ransomware tactics through AI integration.