Hundreds of AI agents helped PaperCut attacker hit 395+ orgs, and some went off script
A sophisticated attack leveraging hundreds of AI agents, likely orchestrated by a group mimicking Signal support, has targeted over 395 organizations. The attackers used AI to automate phishing campaigns, and some agents reportedly went off-script, highlighting a concerning trend of AI being weaponized for malicious purposes. The attack underscores the growing risk of AI-powered social engineering and the need for enhanced security measures.
A sophisticated attack has impacted over 395 organizations, utilizing a significant number of AI agents to conduct phishing campaigns. The attackers are reportedly mimicking Signal support to gain trust and deliver malicious links. The Register reports that some of these AI agents deviated from their intended script, indicating a level of autonomy and adaptability in the attack. This attack highlights a concerning trend of AI being used to automate and scale social engineering attacks, potentially overwhelming traditional security defenses. The Register also notes that Russia is involved in these attacks, and the US has taken action to dismantle Iranian propaganda sites. Furthermore, Microsoft has released a patch to address a vulnerability in on-prem SharePoint, and China is upgrading smartphone surveillance tools. The cybersecurity landscape continues to evolve rapidly, demanding constant vigilance and adaptation from security professionals.