Loading story…
CrowdStrike reported that AI has become both an offensive enabler and a direct target in cyberattacks, with AI-enabled malicious activity rising 89% over the past year and generating more than twice as much potentially malicious detection noise as human-triggered activity. The company said attackers are using frontier models to identify vulnerabilities, generate scripts and payloads, automate intrusion workflows, and troubleshoot operations, while also pursuing attacks such as LLMjacking, AI cost-harvesting, and compromises of AI infrastructure and agentic systems. The findings align with earlier disclosures from OpenAI, which said it banned accounts tied to publicly reported China-linked actors including Vixen and Keyhole Panda, as well as suspected DPRK-affiliated operators, for using AI to support vulnerability research, scripting, phishing, malware research, translation, and cryptocurrency-focused targeting.
The report warns that AI is sharply compressing defender response time, with 88% of vulnerabilities reportedly weaponized within 48 hours, reducing effective patch windows to roughly 24 to 48 hours. CrowdStrike highlighted rapid post-disclosure exploitation by China-linked groups including Vault Panda and Genesis Panda, and described advanced AI-enabled tradecraft by North Korean actors such as Famous Chollima, including fake companies, AI-generated infrastructure, and trojanized repositories aimed at cryptocurrency, blockchain, and AI-focused development environments. It also cited expanding supply-chain risk, including TeamPCP’s compromise of more than 300 software dependencies in a single day and financially motivated activity such as Altered Spider stealing credentials and pivoting into cloud environments, underscoring how AI tools and integrations are widening an under-defended attack surface.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
11 events from the most recent confirmed update back to the earliest known activity.
CrowdStrike published an adversary profile focused on Snarky Spider. The existing timeline does not previously document this actor or related activity.
CrowdStrike said that from January to June, 88 percent of exploitation using public proof-of-concept code occurred within 48 hours of the code's release. It argued that AI-driven weaponization had compressed practical patch timelines to 24 to 48 hours.
CrowdStrike said Altered Spider, also known elsewhere as TeamPCP, compromised more than 300 software dependencies in one day during the first half of the year. The actor harvested credentials and secrets before pivoting into cloud environments for theft and extortion.
CrowdStrike assessed that Famous Chollima demonstrated the most advanced AI usage during the second half of 2025 and first half of 2026. It said the North Korean group used fake companies with AI-generated websites, GitHub accounts, and email infrastructure to support insider-threat operations.
CrowdStrike reported that attacks by AI-enabled adversaries rose 89 percent in 2025. The company said AI had become both an offensive enabler and a target across the attack chain.
CrowdStrike said Famous Chollima conducted a supply-chain campaign in January and February targeting cryptocurrency and blockchain companies. The operation used trojanized GitHub repositories with hidden malicious scripts that executed commands when opened, giving the actor access to developer environments.
CrowdStrike said one LLMJacking campaign abused a victim's cloud-based LLM to generate nearly 200,000 API requests in two minutes. The company said the misuse caused large-scale financial and operational impact, highlighting AI credentials and models as active attack targets.
CrowdStrike said China-linked groups including Vault Panda and Genesis Panda launched attacks within 24 hours of vulnerability disclosure. The report cited this as evidence that AI is accelerating vulnerability weaponization.
CrowdStrike said threat hunters suspect Stardust Chollima, also known as Sapphire Sleet, was behind the March Axios supply-chain attack. The report presented this as a suspected attribution rather than a confirmed finding.
OpenAI said it banned accounts associated with Vixen and Keyhole Panda, threat actors publicly attributed to the People's Republic of China. According to the notice, the accounts used AI for vulnerability research, scripting, translation, and operational troubleshooting.
OpenAI said it banned accounts potentially associated with publicly reported DPRK-affiliated threat actors. The accounts had allegedly used AI to research intrusion tooling, phishing, malware, and cryptocurrency targeting.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
9 references tracked. Mallory keeps watching after this page renders.
zdnet.fr
Open sourcezdnet.com
Open sourcecyberscoop.com
Open sourcetheregister.com
Open sourcecrowdstrike.com
Open sourcecrowdstrike.com
Open sourceatlas.mitre.org
Open sourceopenai.com
Open sourceopenai.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Threat actors increasingly abused *legitimate AI tools* and automation to accelerate intrusions, with CrowdStrike reporting an **89% YoY increase in AI-enabled adversary activity** and an average eCrime breakout time dropping to **29 minutes** (fastest observed **27 seconds**). CrowdStrike also described attackers poisoning or hijacking local AI tooling via **malicious JavaScript embedded in npm packages** targeting tools such as *Claude* and *Gemini* to steal credentials and crypto assets, and highlighted a **CHATTY SPIDER** intrusion that began with voice phishing and remote access via **Microsoft Quick Assist**, followed by attempted exfiltration using **WinSCP** and a fallback to **Google Drive** when blocked. Separate reporting detailed additional active campaigns and exploitation trends consistent with faster initial access and persistence: **UAC-0050 (DaVinci Group / “Mercenary Akula”)** used spear-phishing with spoofed Ukrainian judicial themes and multi-layer archives (ZIP→RAR→passworded 7z) to deliver an `*.pdf.exe` dropper that installed **Remote Manipulator System (RMS)** for remote control and file transfer against a European financial institution. **UnsolicitedBooker** shifted targeting to telecoms in Kyrgyzstan and Tajikistan, using phishing documents that prompt “Enable Content” to run macros that drop loaders (e.g., **LuciLoad**, **MarsSnakeLoader**) and deploy **LuciDoor** and **MarsSnake** backdoors. Vulnerability intelligence for January 2026 also warned of **active exploitation** including **APT28** use of a Microsoft Office zero-day (**CVE-2026-21509**) via weaponized RTFs to deliver implants (e.g., **Covenant**), alongside multiple critical authentication-bypass and RCE issues affecting enterprise platforms—reinforcing that adversaries are combining rapid social engineering, supply-chain style delivery, and exploited vulnerabilities to compress dwell time and speed lateral movement.
Jun 29, 2026
Check Point Research reported that AI use in offensive cyber operations advanced from planning support to direct execution during March and April, with commercial tools such as **Claude Code** appearing in live criminal, ransomware, mass-exploitation, and state-linked espionage activity. The report cites persistent AI-assisted operations tied to the breach of nine Mexican government agencies and the **Bissa Scanner** mass-exploitation platform, and says attackers are increasingly using AI to accelerate reconnaissance, exploitation, and post-compromise actions in ways that closely resemble skilled human operators. The report also identifies new attack surfaces and scaling effects created by enterprise AI adoption. Agentic configuration artifacts including `CLAUDE.md`, hooks, settings files, and MCP-related files were described as targets for jailbreaks, supply-chain compromise, and credential theft, while the **EvilTokens** platform was highlighted for using LLMs to automate token theft, email analysis, business email compromise, and multilingual fraud. Check Point said AI is shrinking the patch window for defenders by speeding flaw discovery and weaponization, pointing to exploitation of an **LMDeploy SSRF** issue within 12 hours of disclosure, while warning that existing victim-side controls remain poorly suited to detecting AI-executed intrusions.
Jun 29, 2026
CrowdStrike and external reporting warn that attackers are increasingly abusing legitimate enterprise AI tools, chatbots, and autonomous agents to conduct stealthy intrusions in a shift described as **"living off the AI land."** Findings cited from CrowdStrike’s threat reporting say more than 90 organizations experienced misuse of legitimate AI tools to generate malicious commands, exfiltrate sensitive data, steal credentials, and support financially motivated crime including cryptocurrency theft. The reporting also says **ChatGPT** was referenced on criminal forums far more often than rival models, with mentions reportedly **550% higher** than competitors, underscoring growing attacker interest in AI-enabled tradecraft. Security leaders are being warned that compromised AI agents may pose greater risk than traditional living-off-the-land tools such as **PowerShell** because they can inherit broad privileges and operate across multiple enterprise systems. CrowdStrike Field CTO Zeki Turedi said many organizations lack the governance, identity controls, and telemetry needed to distinguish AI-agent activity from human behavior, creating blind spots for detection and response. Survey data cited from the Cloud Security Alliance found **68%** of respondents could not accurately identify agent activity versus human activity, highlighting a widening visibility gap as AI becomes both an attack amplifier and a new attack surface.
Jul 17, 2026