AI-Driven Intrusion Ecosystem Exploited by Ransomware Affiliates

Cybersecurity researchers uncovered an AI-driven intrusion framework, 'Phantom,' used by Russian-speaking ransomware affiliates to execute cyberattacks and data extortion. The infrastructure reveals a sophisticated ecosystem involving both intrusion and data-exfiltration operations.

Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups.

Central to the operation is an "Autonomous Red Team Kill Chain Framework" referred to as Phantom. The threat actor is assessed to be Russian-speaking and functions both as an intrusion and data-extortion operator, as well as an

Read original article