Tag: Initial Access Broker
Ransomware brokers ran their intrusions through an AI kill chain framework
An exposed server laid bare 133 sessions of AI-assisted break-ins with a human approving each step.
An AI-driven crew turned 51 agents loose on Ukrainian targets
A Russian-speaking broker ran two attack pipelines at once, and an open directory handed researchers the whole operation.
Ryuk ransomware operator pleads guilty in US federal court
An Armenian national admitted to deploying Ryuk ransomware on hundreds of corporate servers, collecting over $15 million in Bitcoin ransoms.
Attackers Abuse Legitimate RMM Tools to Breach 80 US Organizations
The VENOMOUS#HELPER campaign uses phishing emails disguised as Social Security Administration statements to trick victims into installing legitimate remote access…