Post by Expel

AI is lowering the barrier to entry for state-sponsored cybercrime operations. We tracked a North Korean operation that installed credential-stealing malware on over 2,000 computers. They didn’t do it with elite tactics. They did it with common AI tools. The group, which we call HexagonalRodent, used LLMs to vibe code their way through the entire chain. AI wrote the malware and built convincing fake company websites used in phishing schemes, turning mediocre hackers into efficient ones. For the CISO, the threat isn’t a sentient super-intelligence. It’s the sheer volume of “good enough” attacks hitting your perimeter. You can’t out-hire this level of automation. You have to out-automate it. Read the full breakdown of HexagonalRodent’s tactics via WIRED’s Matt Burgess and Andy Greenberg: https://lnkd.in/e2-9muPT