“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities

Unit 42 has investigated a threat actor who bypassed AI safety controls to coordinate credential theft, VoIP fraud planning and database exfiltration. The investigation shows how the actor used AI to help plan and execute multiple types of cybercrime activity.