Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions post, oktober 23, 2026oktober 30, 2026 Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an “Autonomous Red Team Kill Chain Framework” referred to as Phantom. The threat actor is assessed to be Russian-speaking and functions both as an intrusion and data-extortion operator, as well as an infrastructure provider supporting different partners across the ransomware ecosystem. Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions: Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions cybersecurity ransomware 2026