{"id":1312,"date":"2026-10-23T10:11:41","date_gmt":"2026-10-23T08:11:41","guid":{"rendered":"https:\/\/familiebuckens.nl\/?p=1312"},"modified":"2026-10-30T10:12:18","modified_gmt":"2026-10-30T08:12:18","slug":"exposed-infrastructure-reveals-how-ransomware-affiliates-used-ai-agents-to-execute-intrusions","status":"publish","type":"post","link":"https:\/\/familiebuckens.nl\/index.php\/2026\/10\/23\/exposed-infrastructure-reveals-how-ransomware-affiliates-used-ai-agents-to-execute-intrusions\/","title":{"rendered":"Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the <a href=\"https:\/\/thehackernews.com\/2026\/06\/inc-ransomware-claims-830-victims-since.html\" target=\"_blank\" rel=\"noopener\">INC<\/a> and <a href=\"https:\/\/thehackernews.com\/2026\/06\/the-gentlemen-raas-uses-gentlekiller.html\" target=\"_blank\" rel=\"noopener\">The Gentlemen<\/a> ransomware groups.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Central to the operation is an &#8220;Autonomous Red Team Kill Chain Framework&#8221; referred to as Phantom. The threat actor is assessed to be Russian-speaking and functions both as an intrusion and data-extortion operator, as well as an infrastructure provider supporting different partners across the ransomware ecosystem.<\/p>\n\n\n<a class=\"wp-block-read-more\" href=\"https:\/\/familiebuckens.nl\/index.php\/2026\/10\/23\/exposed-infrastructure-reveals-how-ransomware-affiliates-used-ai-agents-to-execute-intrusions\/\" target=\"_self\"><a href=\"https:\/\/thehackernews.com\/2026\/10\/exposed-infrastructure-reveals-how.html\">Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions<\/a><span class=\"screen-reader-text\">: Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions<\/span><\/a>","protected":false},"excerpt":{"rendered":"<p>Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an &#8220;Autonomous Red Team Kill Chain Framework&#8221; referred to as Phantom. The threat actor is assessed to be Russian-speaking and functions both as an&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20,4],"tags":[72],"class_list":["post-1312","post","type-post","status-publish","format-standard","hentry","category-cybersecurity","category-ransomware","tag-72"],"_links":{"self":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/1312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/comments?post=1312"}],"version-history":[{"count":1,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/1312\/revisions"}],"predecessor-version":[{"id":1313,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/1312\/revisions\/1313"}],"wp:attachment":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/media?parent=1312"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/categories?post=1312"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/tags?post=1312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}