Generative AI systems
Incidents implicated systems
Incident 9556 Report
Global Cybercrime Network Storm-2139 Allegedly Exploits AI to Generate Deepfake Content
2024-12-19
A global cybercrime network, Storm-2139, allegedly exploited stolen credentials and developed custom tools to bypass AI safety guardrails. They reportedly generated harmful deepfake content, including nonconsensual intimate images of celebrities, and their software is reported to have disabled content moderation, hijacked AI access, and resold illicit services. Microsoft disrupted the operation and filed a lawsuit in December 2024, later identifying key members of the network in February 2025.
MoreIncident 10375 Report
Microsoft Reportedly Blocks 1.6 Million Bot Signup Attempts Per Hour Amid Global AI-Driven Fraud Surge
2025-04-16
Between April 2024 and April 2025, Microsoft reportedly blocked 1.6 million bot signups per hour and disrupted $4 billion in fraud attempts linked to AI-enhanced scams. The company's Cyber Signals report details how generative AI is being used to fabricate realistic e-commerce sites, job offers, customer service bots, and phishing lures. Fraud actors now automate mass-deceptive campaigns with fake reviews, deepfakes, and cloned brand domains at unprecedented scale and speed.
MoreIncident 15483 Report
South African Home Affairs Revised White Paper Reportedly Included Fictitious References Believed to Be AI-Generated
2026-04-30
South Africa's Department of Home Affairs reportedly appended apparent AI-generated fictitious references to its Cabinet-approved Revised White Paper on Citizenship, Immigration and Refugee Protection. The department said the references were not cited in the body, withdrew the standalone list, suspended two senior officials, and commissioned an independent review of policy documents produced since November 2022. It maintained that the paper's substantive policy positions were unaffected.
MoreIncident 8702 Report
Meeten Malware Campaign Reportedly Undermines Web3 Security Using AI-Legitimized Branding
2024-12-06
Threat actors, using aliases such as "Meeten," "Meetio," and "Clusee," reportedly deployed AI-generated content to create fake company websites, blogs, and social media profiles, impersonating legitimate businesses in order to trick Web3 professionals and cryptocurrency users into downloading Realst malware. The malware allegedly targets macOS and Windows platforms, steals credentials, browser data, and cryptocurrency wallet information, exfiltrating sensitive data to remote servers.
More