Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations
Aurora ransomware operators are using SpaceX-owned Cursor's AI agent to perform reconnaissance and exploitation tasks during intrusions.
The Aurora ransomware group is abusing the Cursor Agent AI coding tool to automate reconnaissance and exploitation activities during its operations. This marks a notable case of criminals weaponizing an AI coding agent inside their attack workflow. Cursor was recently acquired by SpaceX, drawing extra attention to the tool's abuse.
55