The group behind the Aur0ra ransomware has been using AI agents to move through victim networks, collect credentials and work its way up to domain administrator access, according to Sophos. AI-assisted intrusion workflow (Source: Sophos) The company, which tracks the group as GOLD OGRE, recovered artifacts from the Cursor AI coding assistant in late August that show the attackers handing the agents VPN logins, proxy access, targets and objectives. The agents then mapped the network … More
The post Ransomware gang talked AI agents into doing much of its dirty work appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
Shufti ties AI agent actions to verified owners and permissions
Bedrock Data routes data exposure fixes to owners and verifies results
Open-weight AI model GLM-5.3 cheated its way to correct answers