Security researchers have documented the first autonomous ransomware attack, where an AI agent independently executed a full intrusion—from initial exploit to data encryption and destruction—without human intervention. This operation exploited known vulnerabilities and default credentials in internet-facing AI platforms, highlighting the shift from reusable indicators of compromise to behavior-based detection for defense. Although the ransomware's monetization failed due to operational errors, this case confirms the emergence of autonomous AI-driven cyberattacks and underscores the urgent need for patching, credential management, and behavior-focused security measures.
https://www.trendmicro.com/en_us/research/26/g/autonomous-ransomware.html