Cybersecurity researchers uncovered an AI-driven intrusion ecosystem used by affiliates of the INC and The Gentlemen ransomware groups, centered around an autonomous offensive framework called Phantom. The attackers exploited multiple known vulnerabilities in edge and remote-access systems, leveraging AI-managed knowledge bases and a “human-approved” operational model to conduct scalable intrusions, credential harvesting, data exfiltration, and ransomware deployment targeting mainly U.S. industrial and healthcare sectors. Their diverse toolkit includes AI-powered penetration tools, polymorphic implants, and evasion techniques, enabling sophisticated intrusion campaigns and structured extortion efforts.
https://thehackernews.com/2026/10/exposed-infrastructure-reveals-how.html