Loading story…
Google Threat Intelligence Group reported that threat actors are moving beyond experimentation with artificial intelligence and are increasingly integrating AI into real-world malicious operations. The update highlights adversarial interest in model distillation, which can reproduce capabilities of larger systems in smaller, cheaper models, alongside continued testing of AI for tasks such as content generation, workflow acceleration, and operational support.
The report indicates that AI adoption by attackers remains evolutionary rather than revolutionary, with actors using the technology to improve efficiency instead of fundamentally changing tradecraft. Google’s tracking suggests the most notable developments are the refinement of distilled models, broader experimentation across criminal and state-linked ecosystems, and the continued embedding of AI into existing intrusion, influence, and cyber-enabled activity.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
Google Cloud published a Mandiant Threat Intelligence blog post titled "GTIG AI Threat Tracker: Distillation, Experimentation, and (Continued) Integration of AI for Adversarial Use." No underlying incident details are provided in the reference content, so the publication itself is the only discrete event that can be extracted.
Google Cloud published a Mandiant Threat Intelligence blog post titled "Adversarial Misuse of Generative AI." Based on the provided content, the publication itself is the discrete event that can be extracted.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
cloud.google.com
Open sourcecloud.google.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Google Threat Intelligence Group reported that threat actors are increasingly incorporating artificial intelligence tools into malicious operations, using them to improve phishing, social engineering, research, translation, and content generation. The activity reflects a broader shift in attacker tradecraft, with AI helping operators produce more convincing lures, refine messaging for different targets and languages, and accelerate routine tasks that support intrusion campaigns. The report indicates that AI adoption by threat actors is advancing but remains largely focused on productivity gains rather than replacing core offensive capabilities. Attackers are using these tools to scale existing workflows and lower the effort required for reconnaissance and deception, while defenders face a growing volume of more polished malicious content and a faster operational tempo from both cybercriminal and state-linked actors.
Jul 12, 2026
Google Threat Intelligence Group (GTIG) published an update to its AI Threat Tracker examining the evolution of adversarial AI use from simple prompting toward more autonomous capabilities. The publication focuses on how threat actors may increasingly apply AI systems in malicious operations. The update highlights autonomous adversarial AI as an emerging security concern for enterprise defenders. CISOs should track AI-enabled threat activity, evaluate controls around AI-agent permissions and tool access, and ensure detection and incident-response processes account for increasingly automated attacker workflows.
Sep 15, 2026
Google security leadership and Google Threat Intelligence Group (GTIG) warned that **AI-enabled “end-to-end” attack toolkits**—akin to today’s exploit kits but driven by LLMs—are likely to emerge, enabling cybercriminals to automate more of the intrusion lifecycle at scale. Google’s Heather Adkins highlighted current attacker use of AI for incremental workflow improvements (e.g., polishing phishing lures) and expressed concern about future capabilities where a model could be prompted to compromise a target and return actionable exploitation guidance (e.g., a “root prompt”) after extended autonomous work. GTIG also reported that some malware is already using LLMs to generate data-theft commands, and that state-linked actors from **China, Iran, and North Korea** are abusing AI across stages such as reconnaissance and command-and-control development. Industry forecasts for 2026 similarly anticipate **AI-driven attacks** accelerating faster than many organizations’ governance and security tooling can keep up, including disruption to vulnerability management and security testing and the likelihood of early “major breaches” tied to AI adoption and agentic workflows. Predictions also point to continued evolution in extortion economics, with ransomware pressure shifting toward data-leak and regulatory/insurance uncertainty, increasing the need for resilience strategies that combine automation with human oversight. Overall, both perspectives converge on near-term attacker experimentation becoming more operationalized, while defenders are expected to respond with increased use of AI-driven scanning, predictive analytics, and improved detection/response automation.
Jun 29, 2026