The ‘first’ AI-run ransomware attack still needed a human

Researchers documented what they called the first known case of "agentic ransomware," an extortion operation where an AI agent technically executed a cyberattack from start to finish, including breaking into a server, stealing credentials, encrypting files, and writing its own ransom note. However, a human still played a critical role by setting up the operation, choosing the victim, provisioning infrastructure, and obtaining the database credentials that the AI agent used. The distinction matters because while the AI agent's autonomous execution of the attack was notable for its speed and capability, the operation was not entirely without human involvement as some initial coverage suggested. The incident raises questions about how easily attackers could scale such operations, though human involvement in victim selection and infrastructure setup could present practical limitations.