Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

Summary

Researchers describe an AI-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups, centered on a framework called Phantom. The operators exploited edge and remote-access systems such as FortiClient EMS, SimpleHelp, cPanel and VPN gateways, with intrusions executed through OpenCode using OpenRouter-hosted commercial models under human-approved prompts. Once inside, they moved laterally, harvested credentials, and collected finance, HR, legal and executive files before ransomware deployment.

Topics

• AI agents

Related items

• HighCVE-2026-57208: Entire CLI path traversal via SessionID in checkpoint restoreSimilar attack · NVD/CVE Database
• MediumInfostealer riding the AI TrainSimilar attack · Check Point Research
• HighCVE-2026-107685: req_llm WebSocket streaming client accepts untrusted TLS certificatesSimilar attack · NVD/CVE Database
• MediumGitLab critical patches include one for a bug that allows code execution by unauthenticated usersSimilar attack · CSO Online
• HighCVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A ServerSimilar attack · AWS Security Bulletins