OpenAI Disrupts Cambodia-Based Scam Network Using ChatGPT

Thu, 06 Aug 2026 13:03:19 +0000

Engineer — Skip
SOC/IR — Learn: Documents how AI-assisted fraud operations leverage LLM accounts for scalable scam content generation; no IOCs or detection surface provided, but useful context for understanding AI-enabled social engineering at scale.
Leader — Learn: Illustrates the emerging risk of AI platforms being weaponized by organized fraud networks; useful context for board-level discussions on AI usage policies and third-party AI tool risk.

Gemini CLI weaponized as hacking agent and botnet operator

Thu, 16 Jul 2026 12:18:39 +0000

Engineer — Learn: Demonstrates that open-source AI CLI tools can be weaponized as autonomous hacking agents without any vulnerability in the tool itself — worth factoring into how you restrict or monitor AI tooling in build and dev environments.
SOC/IR — Plan: This TTP — using legitimate AI CLI processes as attack orchestrators — is worth adding to your behavioral detection backlog; consider hunting for anomalous Gemini CLI process invocations, unusual network calls from AI tool processes, or AI binaries spawning unexpected child processes.
Leader — Learn: A real-world example of AI tools being weaponized at small scale; useful context for AI governance policy discussions and for framing acceptable-use controls around AI developer tooling.