Ransomware gang talked AI agents into doing much of its dirty work

The group behind the Aur0ra ransomware has been using AI agents to move through victim networks, collect credentials and work its way up to domain administrator access, according to Sophos, which tracks the group as GOLD OGRE. Sophos recovered artifacts from the Cursor AI coding assistant showing the attackers handed the agents VPN logins, proxy access, targets and objectives, after which the agents mapped networks and carried out much of the intrusion work.