Ransomware Affiliates Leverage AI to Execute Large-Scale Intrusions

Ransomware affiliates are deploying an AI-powered framework called Phantom, which uses 18 skill modules to automate large-scale intrusions against vulnerable systems including FortiClient EMS and VPN gateways, according to the article. The framework is described as an autonomous red team kill chain being used in live operations. The reported tooling matters because it lowers the effort needed for affiliates to run complex attacks at scale.