Artificial intelligence will help hackers improve cyber attacks
Posted: Wed Feb 12, 2025 8:55 am
The information security company Darktrace, which uses self-learning AI to identify and respond to cyber threats, has released a report describing the current situation on the information security market. It says that if hackers manage to "tame" AI, they will receive the perfect tool for carrying out cyber attacks. In general, experts assess the situation on the information security market as difficult - users and corporate organizations suffer from mass attacks, starting with the use of relatively simple malicious scripts, more complex targeted attacks and extremely complex attacks carried out by special government cyber units and professional hacker groups.
The situation is aggravated by the fact that the capabilities kuwait whatsapp data in AI are enough to increase the destructive potential of cyberattacks in the future. The company has documented three cases of proactive threats that were discovered over the past 12 months and modeled scenarios for attacks on networks using AI. Max Heinemeier, director of proactive threat detection at Darktrace, expects that AI-embedded malware will learn to imitate human behavior using contextualization, i.e., change its behavior based on the current situation. At the same time, we should expect professional hackers to get their hands on AI implants that will complicate their detection and increase the attack effect, he noted.
Toyan Trickbot program
The first attack analyzed by the experts involved a case of an attack on a law firm that fell victim to a phishing campaign that resulted in its infection with Trickbot. This is a Trojan that exploits the Windows EternalBlue vulnerability and targets banks and other financial institutions. The malware continues to be improved, equipping it with modules for “injecting” malicious components, data processing, blocking mechanisms and obfuscation (code obfuscation tools). One of the Trickbot modifications managed to infect 20 network devices, and complex cleaning procedures were required to deactivate it and remove traces of its activity. The experts found Empire Powershell modules in the program, which are used to penetrate the victim’s computer after infection.
The situation is aggravated by the fact that the capabilities kuwait whatsapp data in AI are enough to increase the destructive potential of cyberattacks in the future. The company has documented three cases of proactive threats that were discovered over the past 12 months and modeled scenarios for attacks on networks using AI. Max Heinemeier, director of proactive threat detection at Darktrace, expects that AI-embedded malware will learn to imitate human behavior using contextualization, i.e., change its behavior based on the current situation. At the same time, we should expect professional hackers to get their hands on AI implants that will complicate their detection and increase the attack effect, he noted.
Toyan Trickbot program
The first attack analyzed by the experts involved a case of an attack on a law firm that fell victim to a phishing campaign that resulted in its infection with Trickbot. This is a Trojan that exploits the Windows EternalBlue vulnerability and targets banks and other financial institutions. The malware continues to be improved, equipping it with modules for “injecting” malicious components, data processing, blocking mechanisms and obfuscation (code obfuscation tools). One of the Trickbot modifications managed to infect 20 network devices, and complex cleaning procedures were required to deactivate it and remove traces of its activity. The experts found Empire Powershell modules in the program, which are used to penetrate the victim’s computer after infection.