AnalysisCybersecurityOctober 23, 2026

Ransomware affiliates ran intrusions via AI agents, logs show

Read original source →thehackernews.com

SOCRadar found an exposed directory at 45.227.254[.]43 logging 8,257 messages across 133 sessions from a framework called Phantom, used by INC and The Gentlemen ransomware affiliates. Intrusions ran through OpenCode with OpenRouter-hosted commercial models under an "AI-executed, human-approved" structure.

1 source

More stories today

Open the live feed