What Happened
In recent months, the FBI has reported a new wave of cyber attacks targeting law firms, where attackers are using in-person deception to gain access to sensitive data. This tactic, employed by a group known as the Silent Ransom Group (SRG), involves convincing employees to allow a supposed IT support person into the building, where they install malware or steal data. Meanwhile, a new research paper warns that AI-enabled sanction evasion and proliferation financing (PF) are becoming increasingly prevalent, with North Korea and Iran developing and deploying AI models to aid in these activities.
The Rise of AI-Enabled Attacks
AI models are becoming more vulnerable to iterative attacks, according to a study by Cisco, which found that frontier models from leading companies such as OpenAI and Google have significantly worse risk profiles when subjected to multi-turn attacks. This has significant implications for organizations relying on AI-powered systems for security and decision-making.
Human Deception and Social Engineering
The use of human deception and social engineering tactics is on the rise, with attackers exploiting the trust of employees to gain access to sensitive systems. This is often combined with AI-powered tools, such as chatbots, to spread malware and conduct cryptojacking campaigns. A recent campaign targeting high-performance computer systems used SEO poisoning and AI chatbot recommendations to spread malware.
Key Facts
- What: In-person cyber attacks, AI-enabled sanction evasion, malware campaigns
- Where: US-based law firms, high-performance computer systems
Expert Insights
"The adversary visiting a location in person with a USB key hacking device of some sort has been used for decades, particularly in the banking industry," said Roger Grimes, CISO advisor at KnowBe4. "Usually, it isn't just a direct download of data, but using the USB storage device to gain access to the system."
What to Watch
As the threat landscape continues to evolve, organizations must remain vigilant and adapt their security protocols to address the increasing sophistication of cyber attacks. This includes investing in AI-powered security systems, educating employees on social engineering tactics, and implementing robust incident response plans.
What Happened
In recent months, the FBI has reported a new wave of cyber attacks targeting law firms, where attackers are using in-person deception to gain access to sensitive data. This tactic, employed by a group known as the Silent Ransom Group (SRG), involves convincing employees to allow a supposed IT support person into the building, where they install malware or steal data. Meanwhile, a new research paper warns that AI-enabled sanction evasion and proliferation financing (PF) are becoming increasingly prevalent, with North Korea and Iran developing and deploying AI models to aid in these activities.
The Rise of AI-Enabled Attacks
AI models are becoming more vulnerable to iterative attacks, according to a study by Cisco, which found that frontier models from leading companies such as OpenAI and Google have significantly worse risk profiles when subjected to multi-turn attacks. This has significant implications for organizations relying on AI-powered systems for security and decision-making.
Human Deception and Social Engineering
The use of human deception and social engineering tactics is on the rise, with attackers exploiting the trust of employees to gain access to sensitive systems. This is often combined with AI-powered tools, such as chatbots, to spread malware and conduct cryptojacking campaigns. A recent campaign targeting high-performance computer systems used SEO poisoning and AI chatbot recommendations to spread malware.
Key Facts
- What: In-person cyber attacks, AI-enabled sanction evasion, malware campaigns
- Where: US-based law firms, high-performance computer systems
Expert Insights
"The adversary visiting a location in person with a USB key hacking device of some sort has been used for decades, particularly in the banking industry," said Roger Grimes, CISO advisor at KnowBe4. "Usually, it isn't just a direct download of data, but using the USB storage device to gain access to the system."
What to Watch
As the threat landscape continues to evolve, organizations must remain vigilant and adapt their security protocols to address the increasing sophistication of cyber attacks. This includes investing in AI-powered security systems, educating employees on social engineering tactics, and implementing robust incident response plans.