AI-Driven Cyberattacks Enter New Phase With Autonomous Fraud and Digital Trust Abuse
AI-driven cyberattacks are automating fraud and intrusions, with the GTG-1002 campaign using AI agents for most operational tasks.
AI-driven cyberattacks are evolving, with the China-linked GTG-1002 campaign using AI agents to handle most operational tasks. The report highlights 'PromptSpy', an Android malware that uses AI to read screen content and request instructions for interaction, and 'LunaLock', which uses AI to find sensitive data for extortion. These attacks exploit trust in familiar actions, such as video calls and payment approvals, leading to financial fraud and data theft.
- AI-driven attacks are automating fraud and network intrusions, including deepfake calls and autonomous agents.
- The China-linked GTG-1002 campaign used AI agents for 80-90% of operational tasks.
- New Android malware 'PromptSpy' uses AI to adapt actions based on screen content.
- ATT&CK
- T1566.001 Spearphishing AttachmentT1059.001 PowerShellT1059.007 JavaScriptT1027 Obfuscated Files or InformationT1204.002 Malicious File
- Vendors
- Trellix
- Threat actors
- GTG-1002
- Victims
- artists’ marketplace
- Organizations
- TrellixCyber Security News
- Countries
- China
From the original article
3 min read at cybersecuritynews.com
Cyberattacks are increasingly built around familiar actions: signing in, approving a payment, or using a trusted app. Artificial intelligence can help attackers repeat those actions at speed, making financial fraud and network intrusion harder to spot before damage is done. The threats take different forms.
By Tushar Subhra Dutta · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.