AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too
Proofpoint research argues AI is degrading threat actor quality, with once-sophisticated TA4903 now producing sloppier credential phishing and BEC attacks.
Proofpoint principal threat researcher Selena Larson briefed that AI-generated attack chains are making many threat actors less effective, contrary to vendor marketing narratives. TA4903, a five-year-old cybercrime operation focused on credential phishing and BEC, previously impersonated the U.S. government with elaborate PDFs, QR codes, and landing pages. Since March, TA4903 has used AI for every part of its attack chain, increasing volume while decreasing sophistication. The piece pushes back on a widely reported survey claiming 84% of ransomware attacks use AI.
- Proofpoint says AI increases attack noise but reduces threat actor sophistication
- TA4903 shifted to full AI-generated attack chains since March 2026
- Actor previously ran convincing U.S. government impersonation phishing with QR codes
- Challenges survey claim that 84% of ransomware attacks use AI
- Threat actors
- TA4903
- Organizations
- ProofpointSelena Larson
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 2dfc59743329df8d3d7e339c546d9d6a | -mois-training-academy#recipe=similar-items&sourcecontentid=2dfc59743329df8d3d7e339c546d9d6a) Data Leak Outs Hacker Students of Iran's MOIS Training Ac |
| md5 | cee51c1e132a09f4d2269704d631b3dd | y-firm-outpost24-phish#recipe=similar-items&sourcecontentid=cee51c1e132a09f4d2269704d631b3dd) Hackers Target Cybersecurity Firm Outpost24 in 7-Stage Ph |
| md5 | f52c49aa13e56917581cde296474faa3 | ernet-attacks-continue#recipe=similar-items&sourcecontentid=f52c49aa13e56917581cde296474faa3) React2Shell Exploits Flood the Internet as Attacks Contin |
| md5 | f77e926bb76465f465f24e5fc7e9eebc | r-kinetic-war-doctrine#recipe=similar-items&sourcecontentid=f77e926bb76465f465f24e5fc7e9eebc) Iran's Cyber-Kinetic War Doctrine Takes Shape by Alexande |
From the original article
8 min read at darkreading.com
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
By Nate Nelson · darkreading.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.