A Russian-speaking threat actor used AI to plan, manage and conduct cyberattacks on organisations with misconfigured firewalls in 55 countries in January and February, according to Amazon researchers.
Attackers used “technical assessment” projects with repeatable naming conventions to blend in cloning and build workflows, retrieving loader scripts from remote infrastructure, and minimizing on-disk ...