Bitdefender finds signs of AI agents in UK school ransomware attack

Bitdefender disclosed Wednesday that a ransomware attack on a UK school group showed behavioral signs consistent with AI agents carrying out parts of the intrusion. The company attributed the attack to a 3AM ransomware affiliate targeting infrastructure spanning 47 systems across separate domains. Researchers observed repeated attempts to repair failed commands at intervals of 40 to 100 seconds, alongside longer pauses consistent with human decisions. Anti-tampering protections blocked an attempt to remove security software. Bitdefender could not determine which AI model was involved or whether a human manually transferred commands between an AI tool and the victim's network.