Ransomware gang reportedly used AI agents to move through victim networks
RANSOMWAREAur0ra ransomwareredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
According to Sophos, the group it tracks as GOLD OGRE, behind Aur0ra ransomware, used AI agents to move through victim networks, collect credentials and escalate to domain administrator access. Sophos recovered artefacts from the Cursor AI coding assistant in late August showing attackers supplying the agents with VPN logins, proxy access, targets and objectives.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Review VPN and proxy logs for unusual access patterns and unfamiliar sessions.
- Restrict and monitor domain administrator accounts and credential use across the network.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Help Net Security
Who and what is in it
Threat actors
Malware
Companies