Microsoft AI Driving Shift in Cyberattack Methods

According to Microsoft's latest report, hackers are leveraging generative AI to scale cyberattacks at an unprecedented pace. Microsoft Threat Intelligence analyzes that generative AI supports nearly every stage of cyberattacks, from crafting phishing emails to building malware, thereby accelerating hackers' activities. AI is elevating the complexity and speed of cyberattacks to a new level.

AI contributes to attackers moving faster, scaling operations, and lowering the technical proficiency required for attacks. AI is being used for attackers to generate realistic identities, resumes, and communications to access corporate systems. AI helps attackers process lateral movements more quickly. Tasks that once took hours or days can now be completed in minutes. Microsoft describes AI as a 'force multiplier' that reduces friction for attackers. AI-powered tools lower the barrier to entry, making cybercriminal activities that previously required specialized skills more accessible. AI is also used for attackers to more rapidly build phishing websites or attack infrastructure.

These advancements in AI are evident in cases where North Korean hacking groups like Lazarus (Jasper) and Corvus (Coral) have integrated AI into their operations. Some experiments have shown malware exhibiting the ability to dynamically generate scripts or alter behavior during execution.