> ## Content Index
> Fetch the complete content index at: https://aiadoption.org/llms.txt
> Use this file to discover other available public pages before exploring further.

# AI-Powered Cyber Attacks
- URL: https://aiadoption.org/record/ai-powered-cyber-attacks/
- Published: 2026-10-25T11:07:35.000Z
- Updated: 2026-10-26T23:22:58.000Z
- Description: 31 verified cyber attack campaigns that used AI models, each from the developer's, agency's or security firm's own report, dated and linked.
- Author: Manu
- Tags: News, AI Ethics, AI Cybersecurity, #record, #record-thread, #record-hub-ethics

[The AI Record](https://aiadoption.org/record/) › [Threads](https://aiadoption.org/record/#threads) › AI-Powered Cyber Attacks

[**The AI Record**](https://aiadoption.org/record/)ThreadLatest campaign 21 Oct 2026Checked 25 Oct 2026

# AI-Powered Cyber Attacks

When have AI models been used to carry out cyber attacks, by whom, and how much of the work did the AI do? Every campaign we could find, dated, labelled and linked to its source.

**31**verified attack campaigns

**13**reporting organisations

[Download the data (CSV)](https://charts.aiadoption.org/record/ai-powered-cyber-attacks.csv?ref=aiadoption.org)Copy citation

Filed in [AI Ethics & Safety](https://aiadoption.org/ai-ethics-statistics/) › [AI Incidents](https://aiadoption.org/ai-ethics-statistics/#ai-incidents)

## On one timeline

One line per kind of step. Filled dots are counted; open dots are claimed, lifted or not yet in effect. Hover or tap a dot.

Ahead

AI-assisted attack10 counted · 0 other

[](#e-openai-influence-and-cyber-operations-2024-10)[](#e-gtig-adversarial-misuse-gemini-2025-01)[](#e-openai-dprk-intrusion-research-2025-02)[](#e-openai-cyber-operations-oct-2025)[](#e-gtig-ai-threat-tracker-in-operations-2025-11)[](#e-sysdig-ai-assisted-aws-intrusion-2026-02)[](#e-amazon-ai-augmented-fortigate-campaign-2026-02)[](#e-gtig-ai-developed-zero-day-exploit-2026-05)[](#e-gambit-aurora-ransomware-cursor-agent-2026-08)[](#e-anthropic-gtg-50029-hacktivists-europe-2026-09)

AI phishing or fraud3 counted · 0 other

[](#e-fbi-ai-voice-impersonation-us-officials-2025-05)[](#e-gtig-clickfix-ai-chat-shares-coinbait-2026-02)[](#e-microsoft-ai-enabled-device-code-phishing-2026-04)

AI-enabled malware4 counted · 0 other

[](#e-openai-scopecreep-malware-2025-06)[](#e-cert-ua-lamehug-apt28-llm-malware-2025-07)[](#e-anthropic-gtg-5004-ransomware-as-a-service-2025-08)[](#e-wiz-nx-s1ngularity-ai-cli-weaponised-2025-08)

AI-orchestrated attack14 counted · 0 other

[](#e-anthropic-gtg-2002-vibe-hacking-extortion-2025-08)[](#e-anthropic-ai-orchestrated-espionage-2025-11)[](#e-gambit-claude-mexico-government-breach-2026-02)[](#e-gtig-prc-agentic-frameworks-hexstrike-strix-2026-05)[](#e-sysdig-jadepuffer-agentic-ransomware-2026-07)[](#e-unit42-deepseek-hermes-autonomous-campaign-2026-07)[](#e-unit42-ai-agents-enterprise-intrusion-10-hours-2026-09)[](#e-gtig-agent-enabled-credential-harvesting-2026-09)[](#e-anthropic-gtg-10007-chinese-speaking-operators-2026-09)[](#e-anthropic-gtg-20006-russian-espionage-2026-09)[](#e-anthropic-gtg-50014-shinyhunters-affiliates-2026-09)[](#e-gambit-ai-agents-online-retailers-2026-09)[](#e-crowdstrike-artex-south-korean-finance-2026-10)[](#e-microsoft-storm-0940-artex-connectwise-2026-10)

2023202420252026

## Every campaign

Newest first. Each verified entry counts once; claimed entries are shown and labelled but not counted.

**What counts**

A case counts when an AI developer, a government security agency or an established security firm publishes its own report that an AI model was used to carry out, automate or materially assist a specific cyber attack, intrusion or malware campaign, with the attacker's use of AI observed rather than assumed. Each campaign counts once, from its first report. General warnings, forecasts, proof-of-concept research with no real victims, and unconfirmed media claims are listed under related, not counted.

1. 21 Oct 2026  
Microsoft Threat IntelligenceAI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromiseChina-aligned Storm-0940 used the ARTEX agentic AI framework to automate scanning, password spraying and OAuth abuse against hundreds of organisations, including downstream customers after the ConnectWise supply-chain compromise, gaining privileged cloud access at several in under three hours.VerifiedAI-orchestrated attack[Official document →](https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261024103003/https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/)
2. 7 Oct 2026  
CrowdStrike · security-firmUnknown Threat Actor Uses AI-Driven ARTEX to Target South Korean FinanceA likely Chinese-speaking, financially motivated actor used the Chinese open-source agentic pentest tool ARTEX with DeepSeek, plus Claude Code sessions, against South Korean financial organisations, ending in data theft.VerifiedAI-orchestrated attack[Official document →](https://www.crowdstrike.com/en-us/blog/unknown-threat-actor-uses-artex-to-target-south-korean-finance/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261026021251/https://www.crowdstrike.com/en-us/blog/unknown-threat-actor-uses-artex-to-target-south-korean-finance/)
3. 22 Sep 2026  
Gambit Security · security-firmAutonomous AI Agents are breaking into hundreds of Online Retailers for $25 a target in an ongoing campaignA financially motivated, Chinese-speaking operator ran open-source AI agent tools, using DeepSeek, GLM and Claude Opus models, that carried out almost the whole attack chain against online shops, stealing card data and planting card-skimming scripts.VerifiedAI-orchestrated attack[Official document →](https://gambit.security/blog-posts/autonomous-ai-agents-online-retailers-25-a-company?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261009231150/https://gambit.security/blog-posts/autonomous-ai-agents-online-retailers-25-a-company)
4. 10 Sep 2026  
AnthropicDetecting and countering misuse of AI: September 2026 (GTG-50029)A single French-speaking hacktivist used Claude to build a website exploit and run reconnaissance with sub-agents, then breached European political and media organisations and leaked data.VerifiedAI-assisted attack[Official document →](https://www.anthropic.com/threat-intelligence-report-september-2026?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261024162742/https://www.anthropic.com/threat-intelligence-report-september-2026)
5. 10 Sep 2026  
AnthropicDetecting and countering misuse of AI: September 2026 (GTG-50014)Suspected ShinyHunters affiliates used Claude agents to speed up scanning, exploitation and account takeover; agents did nearly all the work in one SaaS supply-chain theft, and stolen AI API keys funded further attacks.VerifiedAI-orchestrated attack[Official document →](https://www.anthropic.com/threat-intelligence-report-september-2026?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261024162742/https://www.anthropic.com/threat-intelligence-report-september-2026)
6. 10 Sep 2026  
AnthropicDetecting and countering misuse of AI: September 2026 (GTG-20006)A Russian state-linked espionage actor, consistent with reporting on Midnight Blizzard, used Claude workflows for infrastructure, phishing, C2 and data theft, and had agents rebuild its malware whenever security products flagged it.VerifiedAI-orchestrated attack[Official document →](https://www.anthropic.com/threat-intelligence-report-september-2026?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261024162742/https://www.anthropic.com/threat-intelligence-report-september-2026)
7. 10 Sep 2026  
AnthropicDetecting and countering misuse of AI: September 2026 (GTG-10007)Chinese-speaking operators, likely based in Changsha, used Claude to coordinate an offensive programme with multiple AI agents, including vulnerability research and intrusions. Anthropic banned the accounts.VerifiedAI-orchestrated attack[Official document →](https://www.anthropic.com/threat-intelligence-report-september-2026?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261024162742/https://www.anthropic.com/threat-intelligence-report-september-2026)
8. 9 Sep 2026  
Google Threat Intelligence GroupGTIG AI Threat Tracker: From Prompting to AutonomyMandiant saw a suspected financially motivated actor take over a cloud resource, deploy a multi-agent attack framework and, using an AI coding chatbot and agent instructions, plan, build and run a mass credential-harvesting campaign in under six hours.VerifiedAI-orchestrated attack[Official document →](https://cloud.google.com/blog/topics/threat-intelligence/from-prompting-to-autonomy-the-evolution-of-adversarial-ai?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261016004324/https://cloud.google.com/blog/topics/threat-intelligence/from-prompting-to-autonomy-the-evolution-of-adversarial-ai)
9. 2 Sep 2026  
Palo Alto Networks Unit 42 · security-firmAn AI-Assisted Cyber Attack: Inside a Unit 42 InvestigationIn an incident Unit 42 handled, an attacker used frontier AI models and agent frameworks to map the network, pull secrets from code repositories, take root credentials and hijack CI/CD pipelines, compressing about two weeks of work into under 10 hours, then had an agent write an 80-page audit of the victim.VerifiedAI-orchestrated attack[Official document →](https://unit42.paloaltonetworks.com/ai-assisted-cyber-attack-inside-a-unit-42-investigation/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261025103635/https://unit42.paloaltonetworks.com/ai-assisted-cyber-attack-inside-a-unit-42-investigation/)
10. 27 Aug 2026  
Gambit Security · security-firmAurora ransomware targets ESXi, abuses Cursor Agent for exploitationAn operator of the Aurora ransomware group used Cursor Agent running Claude Sonnet, given stolen credentials or tunnels, to scan internal networks, enumerate rights and run exploitation steps inside victim organisations, alongside a Linux/ESXi ransomware variant.VerifiedAI-assisted attack[Official document →](https://gambit.security/blog-posts/aurora-ransomware-targets-esxi-abuses-cursor-agent-for-exploitation?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261013022008/https://gambit.security/blog-posts/aurora-ransomware-targets-esxi-abuses-cursor-agent-for-exploitation)
11. 30 Jul 2026  
Palo Alto Networks Unit 42 · security-firmChinese-Speaking Threat Actor Harnesses AI Models for Autonomous CyberattacksA Chinese-speaking actor ('knaithe'/'KnYuan') ran DeepSeek inside the open-source Hermes Agent as an autonomous operator, controlled over Telegram, to find exposed servers, pick public exploits and attack them. Its confirmed data theft (Citrix NetScaler) came from parallel manual work.VerifiedAI-orchestrated attack[Official document →](https://unit42.paloaltonetworks.com/autonomous-ai-cyber-attack-campaign/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261016014917/https://unit42.paloaltonetworks.com/autonomous-ai-cyber-attack-campaign/)
12. 1 Jul 2026  
Sysdig · security-firmJADEPUFFER: Agentic ransomware for automated database extortionAn LLM-driven operator broke into an internet-facing Langflow server (CVE-2025-3248), harvested cloud and AI keys, pivoted to a production database server, encrypted and deleted its configuration data and left a Bitcoin ransom note. The agent fixed its own failed steps within seconds.VerifiedAI-orchestrated attack[Official document →](https://www.sysdig.com/blog/jadepuffer-agentic-ransomware-for-automated-database-extortion?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261015101042/https://www.sysdig.com/blog/jadepuffer-agentic-ransomware-for-automated-database-extortion)
13. 12 May 2026  
Google Threat Intelligence GroupGTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial AccessA suspected China-linked actor ran the agentic hacking tools Hexstrike (with a memory system) and Strix against real targets, letting the AI choose recon tools and find and validate vulnerabilities on its own.VerifiedAI-orchestrated attack[Official document →](https://cloud.google.com/blog/topics/threat-intelligence/ai-vulnerability-exploitation-initial-access?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261025103853/https://cloud.google.com/blog/topics/threat-intelligence/ai-vulnerability-exploitation-initial-access)
14. 12 May 2026  
Google Threat Intelligence GroupGTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial AccessCriminals planning a mass-exploitation operation built a zero-day exploit (a 2FA bypass in a popular open-source web admin tool) that Google assesses with high confidence was found and weaponised with an AI model. Google alerted the vendor and may have stopped its use.VerifiedAI-assisted attack[Official document →](https://cloud.google.com/blog/topics/threat-intelligence/ai-vulnerability-exploitation-initial-access?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261025103853/https://cloud.google.com/blog/topics/threat-intelligence/ai-vulnerability-exploitation-initial-access)
15. 6 Apr 2026  
Microsoft Defender Security ResearchInside an AI-enabled device code phishing campaignMicrosoft described a large device-code phishing campaign that used generative AI to write lures tailored to each victim's job and automated infrastructure to generate live codes, compromising organisational accounts at scale.VerifiedAI phishing or fraud[Official document →](https://www.microsoft.com/en-us/security/blog/2026/04/06/ai-enabled-device-code-phishing-campaign-april-2026/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261015125046/https://www.microsoft.com/en-us/security/blog/2026/04/06/ai-enabled-device-code-phishing-campaign-april-2026/)
16. 20 Feb 2026  
Amazon Threat IntelligenceAI-augmented threat actor accesses FortiGate devices at scaleA Russian-speaking, financially motivated actor used at least two commercial AI services to plan attacks and build tools, then broke into FortiGate firewalls through exposed management ports and weak passwords, stole configurations and moved into internal networks.VerifiedAI-assisted attack[Official document →](https://aws.amazon.com/blogs/security/ai-augmented-threat-actor-accesses-fortigate-devices-at-scale/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261011222120/https://aws.amazon.com/blogs/security/ai-augmented-threat-actor-accesses-fortigate-devices-at-scale/)
17. 13 Feb 2026  
Google Threat Intelligence GroupGTIG AI Threat Tracker: Distillation, Experimentation, and (Continued) Integration of AI for Adversarial UseCriminals got Gemini and other AI chatbots to produce fake fix-it instructions and shared those chats as landing pages behind malicious ads, tricking Mac users into installing the ATOMIC infostealer. Google also found COINBAIT, a crypto-exchange phishing kit built with the Lovable AI app builder.VerifiedAI phishing or fraud[Official document →](https://cloud.google.com/blog/topics/threat-intelligence/distillation-experimentation-integration-ai-adversarial-use?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261012203230/https://cloud.google.com/blog/topics/threat-intelligence/distillation-experimentation-integration-ai-adversarial-use)
18. 3 Feb 2026  
Sysdig · security-firmAI-assisted cloud intrusion achieves admin access in 8 minutesAn attacker used AWS credentials found in public S3 buckets and, with LLM-written code and LLM-driven decisions, reached administrator access in under 10 minutes, moved across 19 AWS identities, abused Amazon Bedrock models and launched GPU instances.VerifiedAI-assisted attack[Official document →](https://www.sysdig.com/blog/ai-assisted-cloud-intrusion-achieves-admin-access-in-8-minutes?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260907135138/https://www.sysdig.com/blog/ai-assisted-cloud-intrusion-achieves-admin-access-in-8-minutes)
19. Feb 2026  
Gambit Security · security-firmThe AI-Assisted Breach of Mexico's Government InfrastructureA single unattributed attacker used Claude Code to find flaws, write exploits, escalate privileges and run most commands inside Mexican government networks, and used OpenAI's GPT-4.1 API to analyse data from hundreds of servers.VerifiedAI-orchestrated attack[Official document →](https://gambit.security/ai-assisted-breach-of-mexicos-government-infrastructure?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261015234151/https://gambit.security/ai-assisted-breach-of-mexicos-government-infrastructure)
20. 13 Nov 2025  
AnthropicDisrupting the first reported AI-orchestrated cyber espionage campaignA group Anthropic assesses with high confidence was Chinese state-sponsored used Claude Code as an autonomous agent to run most of an espionage campaign: reconnaissance, exploit writing, credential theft and data extraction, with humans stepping in at a few decision points. It succeeded in a small number of cases.VerifiedAI-orchestrated attack[Official document →](https://www.anthropic.com/news/disrupting-AI-espionage?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261022024822/https://www.anthropic.com/news/disrupting-AI-espionage)
21. 6 Nov 2025  
Google Threat Intelligence GroupGTIG AI Threat Tracker: Advances in Threat Actor Usage of AI ToolsGoogle listed AI-enabled malware seen in operations: QUIETVAULT, which uses AI command-line tools on the victim machine to hunt for secrets, and FRUITSHELL. It also said state groups used Gemini across the attack chain: APT41 for C2 code, North Korea's UNC4899 for exploit research, Iran's TEMP.Zagros for custom malware.VerifiedAI-assisted attack[Official document →](https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261012203320/https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools)
22. 7 Oct 2025  
OpenAIDisrupting malicious uses of AI: an update (October 2025)OpenAI banned three clusters: a Russian-speaking criminal building a remote-access trojan and credential stealers; Korean-language operators (overlapping Trellix reporting on XenoRAT attacks on South Korean diplomatic missions) developing malware and phishing; and China-linked UNK\_DROPPITCH/UTA0388, which wrote multilingual phishing emails and C2 code.VerifiedAI-assisted attack[Official document →](https://openai.com/index/disrupting-malicious-uses-of-ai-phishing-and-scripting-support/?ref=aiadoption.org)
23. 27 Aug 2025  
Wiz · security-firms1ngularity: supply chain attack leaks secrets on GitHub: everything you need to knowPoisoned versions of the Nx npm package ran a script on developers' machines that prompted installed AI command-line tools (Claude, Gemini, Amazon Q) with safety-bypass flags to search for secrets, then posted the loot to public GitHub repositories.VerifiedAI-enabled malware[Official document →](https://wiz.io/blog/s1ngularity-supply-chain-attack?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260928141405/https://www.wiz.io/blog/s1ngularity-supply-chain-attack)
24. 27 Aug 2025  
AnthropicDetecting and countering misuse of AI: August 2025A cybercriminal tracked as GTG-5004 used Claude to develop, market and distribute several ransomware variants with evasion and encryption features, selling them on criminal forums.VerifiedAI-enabled malware[Official document →](https://www.anthropic.com/news/detecting-countering-misuse-aug-2025?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261013192816/https://www.anthropic.com/news/detecting-countering-misuse-aug-2025)
25. 27 Aug 2025  
AnthropicDetecting and countering misuse of AI: August 2025A cybercriminal Anthropic tracks as GTG-2002 used Claude Code to automate reconnaissance, steal credentials and break into networks, then to choose which data to take and to write extortion demands. Anthropic banned the accounts.VerifiedAI-orchestrated attack[Official document →](https://www.anthropic.com/news/detecting-countering-misuse-aug-2025?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261013192816/https://www.anthropic.com/news/detecting-countering-misuse-aug-2025)
26. 17 Jul 2025  
CERT-UA · governmentUAC-0001 cyber attacks on the security and defence sector using LAMEHUG, a tool that uses an LLM (CERT-UA#16039)Ukraine's CERT-UA reported emails from compromised accounts carrying LAMEHUG malware, which asks the Qwen 2.5-Coder-32B-Instruct model (via the Hugging Face API) to write Windows commands that collect system data and documents for theft. Attributed with medium confidence to Russia's APT28.VerifiedAI-enabled malware[Official document →](https://cert.gov.ua/article/6284730?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260925134655/https://cert.gov.ua/article/6284730)
27. 5 Jun 2025  
OpenAIDisrupting malicious uses of AI: June 2025 (Operation 'ScopeCreep')A Russian-speaking actor used ChatGPT, one account per small change, to build and debug Windows malware and its C2 server. The malware was hidden in a fake Crosshair-X gaming tool on a public code repository; OpenAI had the repository taken down.VerifiedAI-enabled malware[Official document →](https://openai.com/index/disrupting-malicious-uses-of-ai-scopecreep/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260809215040/https://openai.com/index/disrupting-malicious-uses-of-ai-scopecreep/)
28. 15 May 2025  
FBI (IC3) · governmentSenior US Officials Impersonated in Malicious Messaging Campaign (PSA I-051525-PSA)The FBI warned of an ongoing campaign since April 2025 in which attackers sent texts and AI-generated voice messages posing as senior US officials, then sent malicious links to take over the targets' accounts.VerifiedAI phishing or fraud[Official document →](https://www.ic3.gov/PSA/2025/PSA250515?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261014133611/https://www.ic3.gov/PSA/2025/PSA250515)
29. 21 Feb 2025  
OpenAIDisrupting malicious uses of our models: an update (February 2025)OpenAI banned accounts linked to North Korean groups (Kimsuky/VELVET CHOLLIMA and an actor linked to APT38) that used ChatGPT to build RDP brute-force tools, obfuscated payloads and crypto-themed phishing. While debugging, the actors revealed staging URLs for malware binaries that security vendors had not yet seen.VerifiedAI-assisted attack[Official document →](https://openai.com/index/disrupting-malicious-uses-of-ai-cyber-threat-actors/?ref=aiadoption.org)
30. 30 Jan 2025  
Google Threat Intelligence GroupAdversarial Misuse of Generative AIGoogle found government-backed groups from more than 20 countries using Gemini for target reconnaissance, vulnerability research, payload development, scripting and phishing. Iran's APT42 used it to craft phishing campaigns.VerifiedAI-assisted attack[Official document →](https://cloud.google.com/blog/topics/threat-intelligence/adversarial-misuse-generative-ai?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261017083048/https://cloud.google.com/blog/topics/threat-intelligence/adversarial-misuse-generative-ai)
31. 9 Oct 2024  
OpenAIInfluence and cyber operations: an update (October 2024)OpenAI banned accounts of China-linked SweetSpecter, which researched vulnerabilities and scripting with ChatGPT while spear-phishing OpenAI staff with SugarGh0st malware; Iran-linked CyberAv3ngers, which asked for PLC default passwords and attack scripts; and Iran's STORM-0817, which debugged Android surveillance malware and its C2 server.VerifiedAI-assisted attack[Official document →](https://cdn.openai.com/threat-intelligence-reports/influence-and-cyber-operations-an-update%5FOctober-2024.pdf?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261017085033/https://cdn.openai.com/threat-intelligence-reports/influence-and-cyber-operations-an-update%5FOctober-2024.pdf)

## Related, not counted

Warnings, forecasts, proof-of-concept research and unconfirmed claims near this question, outside the rule.

1. 1 Oct 2026  
MicrosoftMicrosoft Security Blog: Insights from the 2026 Microsoft Digital Defense ReportMicrosoft says threat actors are adding AI to reconnaissance, social engineering, malware and exploit development.Verified[Official document →](https://www.microsoft.com/en-us/security/blog/2026/10/01/insights-from-the-2026-microsoft-digital-defense-report/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261014205755/https://www.microsoft.com/en-us/security/blog/2026/10/01/insights-from-the-2026-microsoft-digital-defense-report/)
2. 10 Sep 2026  
AnthropicAnthropic: Detecting and countering misuse of AI: September 2026A Russian-speaking actor attacked about 30 AI companies using an open-source pentest platform with a local model gateway.Verified[Official document →](https://www.anthropic.com/threat-intelligence-report-september-2026?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261024162742/https://www.anthropic.com/threat-intelligence-report-september-2026)
3. 9 Sep 2026  
Google Threat Intelligence GroupGoogle Cloud Blog (GTIG): From Prompting to AutonomyGoogle took legal action in June 2026 against 'Outsider Enterprise', a China-based phishing-kit service whose operators used Gemini to generate code.Verified[Official document →](https://cloud.google.com/blog/topics/threat-intelligence/from-prompting-to-autonomy-the-evolution-of-adversarial-ai?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261016004324/https://cloud.google.com/blog/topics/threat-intelligence/from-prompting-to-autonomy-the-evolution-of-adversarial-ai)
4. 3 Jun 2026  
AnthropicAnthropic: What we learned mapping a year's worth of AI-enabled cyber threatsAnthropic mapped 832 accounts banned for malicious cyber activity (Mar 2025-Mar 2026) onto MITRE ATT&CK.Verified[Official document →](https://www.anthropic.com/news/AI-enabled-cyber-threats-mitre-attack?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261021154200/https://www.anthropic.com/news/AI-enabled-cyber-threats-mitre-attack)
5. 12 May 2026  
Google Threat Intelligence GroupGTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial AccessRussia-nexus malware used against Ukraine (CANFAIL, LONGSTREAM) carries LLM-generated filler code to hide its function.Verified[Official document →](https://cloud.google.com/blog/topics/threat-intelligence/ai-vulnerability-exploitation-initial-access?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261025103853/https://cloud.google.com/blog/topics/threat-intelligence/ai-vulnerability-exploitation-initial-access)
6. 12 Mar 2026  
IBM X-Force · security-firmIBM X-Force: A Slopoly start to AI-enhanced ransomware attacksHive0163 (Interlock ransomware) deployed Slopoly, a backdoor IBM says was likely LLM-generated, during a real ransomware attack.Verified[Official document →](https://www.ibm.com/think/x-force/slopoly-start-ai-enhanced-ransomware-attacks?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261001050107/https://www.ibm.com/think/x-force/slopoly-start-ai-enhanced-ransomware-attacks)
7. 19 Feb 2026  
ESET · security-firmESET Threat Report H1 2026PromptSpy, Android malware that uses Gemini to read the screen and keep itself running.Verified[Official document →](https://www.welivesecurity.com/en/eset-research/eset-threat-report-h1-2026/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261008170013/https://www.welivesecurity.com/en/eset-research/eset-threat-report-h1-2026/)
8. 13 Feb 2026  
Google Threat Intelligence GroupGoogle Cloud Blog (GTIG): Distillation, Experimentation, and (Continued) Integration of AI for Adversarial UseHONESTCUE malware asks the Gemini API for C# code and runs it in memory.Verified[Official document →](https://cloud.google.com/blog/topics/threat-intelligence/distillation-experimentation-integration-ai-adversarial-use?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261012203230/https://cloud.google.com/blog/topics/threat-intelligence/distillation-experimentation-integration-ai-adversarial-use)
9. 20 Jan 2026  
Check Point Research · security-firmCheck Point Research: VoidLink: Evidence That the Era of Advanced AI-Generated Malware Has BegunVoidLink, a Linux malware framework, was 'authored almost entirely by artificial intelligence' (TRAE SOLO) by one developer.Verified[Official document →](https://research.checkpoint.com/2026/voidlink-early-ai-generated-malware-framework/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261001124839/https://research.checkpoint.com/2026/voidlink-early-ai-generated-malware-framework/)
10. 6 Nov 2025  
Google Threat Intelligence GroupGoogle Cloud Blog (GTIG): Advances in Threat Actor Usage of AI ToolsPROMPTFLUX, a VBScript dropper that asks Gemini to rewrite itself, and PROMPTLOCK were judged experimental.Verified[Official document →](https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261012203320/https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools)
11. 24 Sep 2025  
Microsoft Threat IntelligenceMicrosoft Security Blog: AI vs. AI: Detecting an AI-obfuscated phishing campaignA credential-phishing campaign against mainly US organisations hid its payload in an SVG file with code Microsoft says was likely LLM-generated.Verified[Official document →](https://www.microsoft.com/en-us/security/blog/2025/09/24/ai-vs-ai-detecting-an-ai-obfuscated-phishing-campaign/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260917075952/https://www.microsoft.com/en-us/security/blog/2025/09/24/ai-vs-ai-detecting-an-ai-obfuscated-phishing-campaign/)
12. 27 Aug 2025  
AnthropicAnthropic: Detecting and countering misuse of AI: August 2025North Korean operatives used Claude to get and keep remote jobs at US Fortune 500 tech firms.Verified[Official document →](https://www.anthropic.com/news/detecting-countering-misuse-aug-2025?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261013192816/https://www.anthropic.com/news/detecting-countering-misuse-aug-2025)
13. 26 Aug 2025  
ESET · security-firmESET WeLiveSecurity: First known AI-powered ransomware uncovered by ESET ResearchESET found PromptLock, ransomware samples that use a local gpt-oss-20b model to generate scripts at runtime.Verified[Official document →](https://www.welivesecurity.com/en/ransomware/first-known-ai-powered-ransomware-uncovered-eset-research/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261005194207/https://www.welivesecurity.com/en/ransomware/first-known-ai-powered-ransomware-uncovered-eset-research/)
14. 23 Apr 2025  
AnthropicAnthropic: Detecting and countering malicious uses of Claude: March 2025Anthropic described actors using Claude to build tools for scraping leaked IoT-camera credentials and a novice building malware.Verified[Official document →](https://www.anthropic.com/news/detecting-and-countering-malicious-uses-of-claude-march-2025?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261017043911/https://www.anthropic.com/news/detecting-and-countering-malicious-uses-of-claude-march-2025)
15. 24 Sep 2024  
HP Wolf Security · security-firmHP Wolf Security Threat Insights Report: September 2024HP found an AsyncRAT campaign (French-language lures) whose scripts were 'highly likely' written with GenAI help.Verified[Official document →](https://threatresearch.ext.hp.com/hp-wolf-security-threat-insights-report-september-2024/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20250810182030/https://threatresearch.ext.hp.com/hp-wolf-security-threat-insights-report-september-2024/)
16. 10 Apr 2024  
Proofpoint · security-firmProofpoint: Security Brief: TA547 Targets German Organizations with Rhadamanthys StealerTA547 phishing against German organisations delivered Rhadamanthys via a PowerShell loader that Proofpoint suspects was LLM-written.Verified[Official document →](https://www.proofpoint.com/us/blog/threat-insight/security-brief-ta547-targets-german-organizations-rhadamanthys-stealer?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20260921185826/https://www.proofpoint.com/us/blog/threat-insight/security-brief-ta547-targets-german-organizations-rhadamanthys-stealer)
17. 14 Feb 2024  
Microsoft Threat IntelligenceStaying ahead of threat actors in the age of AIMicrosoft and OpenAI said five state-linked groups (Russia's Forest Blizzard, North Korea's Emerald Sleet, Iran's Crimson Sandstorm, China's Charcoal Typhoon and Salmon Typhoon) used OpenAI models for target research, scripting help and drafting phishing content. OpenAI closed the accounts.Verified[Official document →](https://www.microsoft.com/en-us/security/blog/2024/02/14/staying-ahead-of-threat-actors-in-the-age-of-ai/?ref=aiadoption.org)[Archived copy](https://web.archive.org/web/20261012212805/https://www.microsoft.com/en-us/security/blog/2024/02/14/staying-ahead-of-threat-actors-in-the-age-of-ai/)

**How this thread is kept**

Every entry links to the official document itself: the order, law, filing or statement, with an archived copy where one exists. Steps known only from news reports are left out, so our count can be lower than press tallies. New entries are added when we find their official text. [How the Record works](https://aiadoption.org/editorial-standards/#the-ai-record) · [Report an error or a missing campaign](https://aiadoption.org/corrections/)