aiqbench analysis
Bitdefender's evidence for AI involvement is circumstantial. The timing of retries and tool switches suggests automated iteration, but the researchers could not identify the model or rule out a human relaying outputs. The case is still a useful data point on how attackers may use LLM-style automation for routine intrusion work, and defenders should weigh it as a signal to watch rather than a confirmed trend.
Hackers Use AI Agents to Launch 3AM Ransomware Attacks Against UK School Networks
A ransomware affiliate has hit a group of UK schools with a mix of human control and AI-style automation. The attackers used built-in Windows tools, stolen backup passwords and fake admin accounts to spread across the school network, then encrypted about 37 machines. The group behind the encryptor is 3AM, also written ThreeAM. It sells […] The post Hackers Use AI Agents to Launch 3AM Ransomware Attacks Against UK School Networks appeared first on Cyber Security News.
A ransomware affiliate has hit a group of UK schools with a mix of human control and AI-style automation. The attackers used built-in Windows tools, stolen backup passwords and fake admin accounts to spread across the school network, then encrypted about 37 machines. The group behind the encryptor is 3AM, also written ThreeAM. It sells its Rust-based ransomware to affiliates, who do the break-ins and share the profit. Readers who followed earlier ThreeAM ransomware reports will know the…
Excerpt shown under the publisher's RSS terms · 78 words · full text and figures are on the publisher's site
Related coverage
A Two-Minute Microsoft Teams Call Could End With Your Network Encrypted With Ransomware
Cybersecurity News · Jul 30, 2026
The Gentlemen Ransomware Hackers Disable EDR and Backups Before Encrypting Networks in Under 24 Hours
Cybersecurity News · Sep 3, 2026
Hackers Exploiting Palo Alto’s PAN-OS Vulnerability to Deploy Qilin Ransomware
Cybersecurity News · Jul 21, 2026
Ryuk Ransomware Operator Sentenced for Deploying Malware and Extorting Victim Networks
Cybersecurity News · Sep 23, 2026