AI-Driven Tools Lower Attacker Skill Floor, Increase Cyberattack Pace, Unit 42 Reports
Unit 42, a cybersecurity research team, has observed a significant rise in the use of AI-driven red teaming tools, such as ARTEX and CyberStrikeAI, by attackers to conduct autonomous offensive operations. These tools, initially marketed for penetration testing, are now being co-opted by malicious actors, lowering the skill floor required for complex cyberattacks. Unit 42's incident response team has investigated multiple intrusions where attackers utilized ARTEX consoles or associated infrastructure. A coordinated ARTEX campaign has also been tracked against customer cloud environments globally, impacting sectors like retail and consulting. The accessibility of these tools, which are often free and require minimal setup beyond access to a large language model (LLM), enables financially motivated actors to launch and manage numerous complex network intrusions with low computational costs. Attackers are leveraging these AI platforms to target internet-exposed assets, including public password reset pages and...
