Skip to Content
logologo
AI Incident Database
Donar
Descubrir
Enviar
  • Bienvenido a la AIID
  • Vista Tabular
  • Vista de lista
  • Entidades
  • Taxonomías
  • Vista espacial
  • Blog
  • Resumen de noticias de IA
  • Incidente aleatorio
  • Registrarse
Descubrir
Enviar
  • Bienvenido a la AIID
  • Vista Tabular
  • Vista de lista
  • Entidades
  • Taxonomías
  • Vista espacial
  • Blog
  • Resumen de noticias de IA
  • Incidente aleatorio
  • Registrarse

Incidente 1661: Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Descripción: Between April 8 and May 21, 2026, a Russian-speaking operator linked to the Aurora ransomware group reportedly used Cursor Agent, running Anthropic's Claude Sonnet 4.5, to assist exploitation across multiple organizations. Researchers said some AI-directed tasks succeeded while others failed; independent reporting identified six affected companies but could not determine how much the AI facilitated each breach or whether all led to data theft or extortion.

Herramientas

Nuevo InformeNueva RespuestaDescubrirVer Historial

Entidades

Ver todas las entidades
Alleged: Anysphere , Anthropic , AI agent system developers y Large language model developers developed an AI system deployed by Aurora ransomware affiliate , Cybercriminals , Ransomware operators , Agentic threat actors y AI agent system deployers, which harmed Christeyns , Teckentrup , Helideck Certification Agency , Bayou Title , Companies y Organizations.
Sistemas de IA presuntamente implicados: Cursor , Claude Sonnet 4.5 , Claude , AI agent systems , Claude AI models , Large language models , LLM-integrated code assistant , Aurora ransomware y Ransomware

Estadísticas de incidentes

ID
1661
Cantidad de informes
3
Fecha del Incidente
2026-04-08
Editores
Daniel Atherton

Informes del Incidente

Cronología de Informes

Incident Occurrence+2
Russian-speaking cybercriminals used SpaceX’s Cursor AI tool to hack seven companies
Loading...
Russian-speaking cybercriminals used SpaceX’s Cursor AI tool to hack seven companies

Russian-speaking cybercriminals used SpaceX’s Cursor AI tool to hack seven companies

reuters.com

Loading...
Aurora ransomware targets ESXi, abuses Cursor Agent for exploitation

Aurora ransomware targets ESXi, abuses Cursor Agent for exploitation

gambit.security

Loading...
Caught in 4K: The Aurora Files

Caught in 4K: The Aurora Files

cloudsek.com

Loading...
Russian-speaking cybercriminals used SpaceX’s Cursor AI tool to hack seven companies
reuters.com · 2026

Russian-speaking hackers used SpaceX's (SPCX.O), opens new tab AI coding assistant, Cursor, to help break in to a Belgian chemical company and at least six other firms earlier this year, according to data reviewed by Reuters and reports iss…

Loading...
Aurora ransomware targets ESXi, abuses Cursor Agent for exploitation
gambit.security · 2026

Gambit Security's Threat Intelligence team investigates emerging attacker tradecraft and the evolving ways threat actors disrupt organizations. As part of this research, we track threat actors and their operations to identify new techniques…

Loading...
Caught in 4K: The Aurora Files
cloudsek.com · 2026

Executive Summary

An exposed open directory revealed months of activity from belonging to a Russian speaking Aurora ransomware affiliate, active against more than twenty organisations between April and July 2026. The directory included the …

Variantes

Una "Variante" es un incidente de IA similar a un caso conocido—tiene los mismos causantes, daños y sistema de IA. En lugar de enumerarlo por separado, lo agrupamos bajo el primer incidente informado. A diferencia de otros incidentes, las variantes no necesitan haber sido informadas fuera de la AIID. Obtenga más información del trabajo de investigación.
¿Has visto algo similar?

Incidentes Similares

Por similitud de texto

Did our AI mess up? Flag the unrelated incidents

Loading...
Fraudsters Used AI to Mimic Voice of a UK-Based Firm's CEO's Boss

Fraudsters Used AI to Mimic Voice of a UK-Based Firm's CEO's Boss

Mar 2019 · 1 informe
Loading...
AI-Generated Profiles Used in Disinformation Campaign Targeting Ukrainians

AI-Generated Profiles Used in Disinformation Campaign Targeting Ukrainians

Feb 2022 · 6 informes
Loading...
Chinese Chatbots Question Communist Party

Chinese Chatbots Question Communist Party

Aug 2017 · 16 informes
Incidente AnteriorSiguiente Incidente

Incidentes Similares

Por similitud de texto

Did our AI mess up? Flag the unrelated incidents

Loading...
Fraudsters Used AI to Mimic Voice of a UK-Based Firm's CEO's Boss

Fraudsters Used AI to Mimic Voice of a UK-Based Firm's CEO's Boss

Mar 2019 · 1 informe
Loading...
AI-Generated Profiles Used in Disinformation Campaign Targeting Ukrainians

AI-Generated Profiles Used in Disinformation Campaign Targeting Ukrainians

Feb 2022 · 6 informes
Loading...
Chinese Chatbots Question Communist Party

Chinese Chatbots Question Communist Party

Aug 2017 · 16 informes

Investigación

  • Definición de un “Incidente de IA”
  • Definición de una “Respuesta a incidentes de IA”
  • Hoja de ruta de la base de datos
  • Trabajo relacionado
  • Descargar Base de Datos Completa

Proyecto y Comunidad

  • Acerca de
  • Contactar y Seguir
  • Aplicaciones y resúmenes
  • Guía del editor

Incidencias

  • Todos los incidentes en forma de lista
  • Incidentes marcados
  • Cola de envío
  • Vista de clasificaciones
  • Taxonomías

2026 - AI Incident Database

  • Condiciones de uso
  • Política de privacidad
  • dd3f754