An AI-assisted campaign used the open-source Cairn tool to automate attacks against more than 1,200 corporate websites, breaching over 100 companies.
AI models helped plan and carry out attack steps.
Researchers found exposed control panels used by the attackers; the amount of data potentially stolen remains unknown.
How attacks work
Artificial intelligence programs allow attackers to plan and execute attacks with minimal human intervention. The goal is to plant files that allow them to gain future access to victims' systems. These actions are highly efficient, with the average cost of each successful breach estimated at $50 and the duration of the attack averaging less than 23 hours.
The revelation from the perpetrators themselves
The attackers’ actions were exposed because they left their program control systems open to the internet, unprotected. NorForge researchers found 14 such control panels, which contained stolen credentials and digital keys. This means that anyone who found these open panels could, in theory, gain access to the same data that the attackers had stolen.
The situation in the affected companies
The companies that were breached report that the damage is limited and that they have already taken steps to strengthen their security. While access credentials have been found on exposed tables, the exact amount of data that may have been stolen during these attacks has not yet been confirmed.
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
