Washington, November 14 (IANS). Are cyber criminals using AI to create fear in the world? Can panic be spread within a few hours? The Federal Bureau of Investigation (FBI) has issued a warning regarding some similar questions. According to the agency, cyber criminals are using Artificial Intelligence (AI) based security testing tools to intensify attacks on organizations around the world. In some of these attacks, they reach 'privileged access' in less than three hours.
On Friday (local time), the bureau said the attackers had used an open-source framework called 'ARTEX' since August. Through this, they have targeted organizations from various sectors like finance, government, technology, defence, energy and healthcare.
According to the FBI, the tool can automate multiple steps of an intrusion—from identifying potential targets to preparing or executing a data breach. This leaves defenders little time to detect and respond to an attack.
The alert said that in some cases, the process from initial targeting to gaining privileged access to the system was completed in less than three hours.
According to the alert, this framework was originally created for authorized security testing. Its developer removed the original online repository in October after reports of its misuse, but other versions and copies are still available, the FBI said.
The bureau said the tool can reduce technical barriers to carrying out complex operations, allowing attackers to hit multiple targets at the same time. Areas of concern raised in the alert include organizations' Internet-connected applications, cloud infrastructure, and systems connected to suppliers or partners.
The FBI cited examples of attacks on South Korean financial institutions that were aimed at financial gain. Due to these attacks, personal information of approximately 67,000 people was stolen. Additionally, a 'supply-chain compromise' was also reported, which affected users of the cloud backup service. This gave the attackers access to the systems of more than 2,250 customers.
The Bureau has advised organizations to review their exposure to the Internet, strengthen identity and access controls, keep an eye on any unusual activity and keep their credentials (login information) secure. Additionally, organizations that notice any suspicious activity are asked to contact the FBI or report it through the 'Internet Crime Complaint Center'.
–IANS
kr/