Ransomware Hacker Uses AI Coding Assistant as Attack Channel Against Enterprise Networks

A ransomware affiliate has turned an AI coding assistant into a channel for running attacks inside enterprise networks. The operator, known as Azazel, combined stolen development credentials, remote command execution and data theft while working with the Gentlemen ransomware group. The campaign affected more than two dozen organisations across six countries, including logistics, insurance, pharmaceuticals, medical devices and AI businesses. Most intrusions began with secrets stolen from software build pipelines, while a separate attack exploited an AI medical imaging service. CloudSEK researchers identified the operation after finding an exposed directory and misconfigured storage infrastructure. CloudSEK said in a report shared with Cyber Security…