An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation
Unit 42 responded to an incident where a human attacker used frontier AI to breach an enterprise network autonomously as part of a ransom attack.
Unit 42 responded to an incident where a human attacker used frontier AI to breach an enterprise network autonomously as part of a ransom attack. The impact was at the scale of a coordinated effort from multiple red teams, which would normally take human operators around two weeks. What made the attack stand out was AI-assisted operational efficiency, without the need for a novel zero-day or super elite tradecraft. Organizations should take note of the following to address agentic attacks: Defending against automated agent loops requires matching the speed and adaptability of AI-driven attacks: Learn more about how Unit 42 can help defend against AI-driven threats through Unit 42 Frontier AI Defense .
What remains unknown
The available reporting does not establish whether the issue is being actively exploited in the wild.
The available reporting does not establish who is behind the activity, if an attacker is involved.