Loading story…
Multiple industry reports and expert commentary indicate a sharp rise in AI-enabled fraud and cybercrime techniques, including voice and virtual meeting scams and deepfake-driven social engineering. A Pindrop report cited a 1,210% increase in AI-enabled voice and virtual meeting fraud over the prior year, with attackers using interactive voice response (IVR) systems for reconnaissance and then leveraging that intelligence for account hijacking; healthcare and retail were reported as the most impacted sectors, alongside growing AI-assisted return fraud that targets low-dollar refunds at scale.
Separately, Malwarebytes reported that AI use in cybercrime accelerated in 2025, but that hands-on-keyboard intrusions still dominated, while ransomware activity rose 8% year-over-year to record highs and 86% of intrusions involved remote encryption, often originating from a single unprotected system. In financial services, experts warned that agentic AI capable of autonomously initiating transactions is creating a “dual authentication crisis,” requiring institutions to validate both intent (whether a user authorized an agent’s actions) and integrity (whether the agent is operating as designed), shifting authentication from identity-only checks (e.g., passwords/MFA) toward verifying delegated authority and agent behavior.
Track how attackers are adapting to this technology.
5 events from the most recent confirmed update back to the earliest known activity.
By early 2026, fraud experts warned that banks' growing use of autonomous AI agents to initiate transactions and manage accounts was creating a dual authentication problem: validating both user intent and agent integrity. Existing MFA and human-centric fraud models were described as inadequate for continuous, agent-driven transactions, prompting new vendor and network initiatives such as Know Your Agent and agentic commerce standards.
The same reporting highlighted increased AI-assisted return fraud in retail during 2025, with bots automating many low-dollar refund requests to stay below review thresholds. The trend was attributed to AI's growing affordability, stealth, and scalability for fraud operations.
A report found AI-enabled voice and virtual meeting fraud increased 1,210% from January to December 2025, far exceeding the rise in traditional fraud. Attackers commonly used IVR systems for reconnaissance and then leveraged the information for account hijacking, with healthcare and retail among the most affected sectors.
Malwarebytes said ransomware activity rose 8% year over year in 2025 to record levels, with most intrusions involving remote encryption often starting from a single unprotected system. The United States accounted for nearly half of detected ransomware attacks, and incidents were seen across 135 countries.
Malwarebytes reported that the use of AI in cybercrime increased over the course of 2025, enabling faster and more effective intrusions, including early deepfake-based social engineering. Despite this growth, the company said hands-on-keyboard intrusions remained the leading incident type in 2025.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
3 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcescworld.com
Open sourcebankinfosecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
AI is accelerating and scaling social engineering by automating reconnaissance, targeting, and victim engagement, reducing both the cost and skill required to run convincing phishing and fraud campaigns. One reported evolution is the use of **AI agents** to collect open-source intelligence and conduct live, interactive conversations with targets with minimal or no human involvement, enabling high-volume, continuously running scam operations that can adapt in real time. Deepfake-enabled impersonation is further eroding trust in voice and video communications, including calls and meetings, with examples cited of finance staff being deceived into transferring **millions** after interacting with fabricated “executives.” Recommended mitigations emphasize shifting from human-sense validation to process-based controls—e.g., enforced verification procedures, out-of-band checks, shared authentication phrases (“safe words”), and emerging *content provenance* approaches—because traditional, predictable detection models are increasingly strained by the speed, personalization, and adaptability of AI-driven attacks.
Jun 29, 2026
No single incident ties the reporting together; the dominant theme is **AI’s expanding role in both enterprise operations and criminal tradecraft**, alongside broader, non-AI security trend commentary. A Docker-sponsored survey reported by *Help Net Security* says **60% of organizations run AI agents in production**, but **security/compliance is the top scaling barrier (40%)**, with recurring concerns including *prompt injection*, *tool poisoning*, runtime isolation/sandboxing, auditability, and credential/access control in distributed agent systems. Separately, forum-traffic research summarized by *Help Net Security* found cybercriminals increasingly using mainstream and local AI models to support phishing, code generation, and social engineering, with frequent discussion of jailbreaking and the use of stolen/resold premium AI accounts. Several other items are adjacent but not about the same specific story: an ESET article provides **generic guidance** on detecting **AI voice deepfakes** used for fraud; an Ars Technica piece covers **copyright/data memorization** risks in LLMs; and multiple outlets publish broader security trend or opinion content (quantum preparedness, ransomware targeting manufacturing, Romanian warnings about ransomware aligning with Russian hybrid aims, ATM jackpotting increases, and a Check Point retrospective). Some entries are primarily **commentary, historical analogy, newsletters, or how-to recon guidance** rather than new threat reporting, and should be treated as lower-signal for executive situational awareness unless your organization is actively deploying agentic AI or tracking AI-enabled fraud/social engineering.
Jun 29, 2026
Reporting on a new MIT-led survey of 30 widely used **agentic AI** systems describes a security posture marked by **limited risk disclosure**, weak transparency, and inconsistent safety protocols, with researchers warning it is difficult to enumerate failure modes when developers do not document capabilities and controls. The coverage also points to recent attention around the open-source agent framework *OpenClaw*, citing reported security flaws that could enable **PC hijacking** when agents are granted broad permissions (e.g., to operate email and other user workflows), and includes vendor responses from Perplexity, OpenAI, and IBM. Separate industry analysis highlights how increasingly autonomous agents—especially those able to **initiate transactions**—compress detection windows for abuse and complicate attribution and liability, particularly in crypto and cross-chain contexts where funds can move in seconds. A vendor blog argues that accountability still ultimately rests with the humans who design, deploy, authorize, or benefit from these systems, and that governance/monitoring architecture may become central evidence in enforcement actions; it also claims 2025 illicit crypto volume reached **$158B** and that **AI-enabled scams** rose sharply year over year. Broader software-engineering commentary reinforces the trend toward AI-native development and widespread use of AI coding tools, but is largely directional and does not add specific incident or vulnerability detail beyond the general risk discussion.
Jun 30, 2026