# Bitdefender finds signs of AI agents in UK school ransomware attack

_Published Wednesday, November 4, 2026 at 7:18 PM EST · Security · Latest · Tier 2 — Notable_

Bitdefender disclosed Wednesday that a ransomware attack on a UK school group showed behavioral signs consistent with AI agents carrying out parts of the intrusion. The company attributed the attack to a 3AM ransomware affiliate targeting infrastructure spanning 47 systems across separate domains.

Researchers observed repeated attempts to repair failed commands at intervals of 40 to 100 seconds, alongside longer pauses consistent with human decisions. Anti-tampering protections blocked an attempt to remove security software.

Bitdefender could not determine which AI model was involved or whether a human manually transferred commands between an AI tool and the victim's network.

## Sources

- [AGERPRES](https://agerpres.ro/english/2026/11/04/bitdefender-experts-detect-hybrid-ransomware-attack-in-which-attackers-work-with-ai-agents--1610072)

---
Canonical: https://techandbusiness.org/newswire/mYKrKu0QJ3tlm1Lf-PNyY0
Published: 2026-11-05T00:18:29.869Z
Story chronology: 2026-11-04T13:52:00.000Z
Retrieved: 2026-11-05T03:00:18.437Z
Publisher: Tech & Business (techandbusiness.org)