Cybernews researchers have discovered an exposed server belonging to an affiliate of the Gentlemen ransomware gang. Through the server, the Cybernews team gained a rare inside look at a massive AI-powered ransomware operation.
The discovery shows how AI is changing cybercrime: a single attack costs as little as $0.40–$4.00 in tokens per company, not counting the supporting infrastructure costs. “Ransomware has effectively turned into a passive revenue stream,” said Aras Nazarovas, a security researcher at Cybernews, who discovered the leaking server.
Here are the key findings:
- The exposed server contained 3.1TB of data stolen from over 30 companies.
- The brain behind the exposed ransomware operation is an AI agent. Malicious activity relies almost entirely on AI automation, with minimal human oversight.
- The AI agent can simultaneously compromise and extort multiple targets and is used at all stages of the attack, including determining ransom demands.
- The compromised companies spanned marketing, healthcare, consulting, compliance, real estate, software development, telecommunications, manufacturing, and transportation, suggesting that attacks are opportunistic.
The findings were responsibly reported to CERT and the police in Lithuania prior to publication, and the authorities shared the information with international partners.
You can find the full Cybernews investigation here:
https://cybernews.com/security/exposed-ransomware-server-reveals-automated-4-dollar-cyberattacks
Related
This entry was posted on September 2, 2026 at 2:15 pm and is filed under Commentary with tags Cybernews. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Exposed ransomware server reveals $4 attacks for sale
Cybernews researchers have discovered an exposed server belonging to an affiliate of the Gentlemen ransomware gang. Through the server, the Cybernews team gained a rare inside look at a massive AI-powered ransomware operation.
The discovery shows how AI is changing cybercrime: a single attack costs as little as $0.40–$4.00 in tokens per company, not counting the supporting infrastructure costs. “Ransomware has effectively turned into a passive revenue stream,” said Aras Nazarovas, a security researcher at Cybernews, who discovered the leaking server.
Here are the key findings:
The findings were responsibly reported to CERT and the police in Lithuania prior to publication, and the authorities shared the information with international partners.
You can find the full Cybernews investigation here:
https://cybernews.com/security/exposed-ransomware-server-reveals-automated-4-dollar-cyberattacks
Share this:
Like this:
Related
This entry was posted on September 2, 2026 at 2:15 pm and is filed under Commentary with tags Cybernews. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.