How AI Is Making Cybercrime More Efficient, Not Reinventing It
Summary
Trend AI researcher Robert McArdle says criminals adapt existing business models rather than reinventing them. AI is accelerating malware development, while agentic systems could scale fraud and make infrastructure disruption central to defense.
Key points
- McArdle says cybercriminals prioritize operational ease and high returns, adapting existing infrastructure incrementally rather than rebuilding around each technology shift.
- AI tools are being used to accelerate malware development, but embedding live LLM execution in payloads remains uncommon due to external API dependencies and unpredictable outputs.
- The article says threat actors may shift AI development tools toward models hosted in jurisdictions less cooperative with Western law enforcement.
- Agentic systems could automate large-scale romance fraud, with human controllers intervening only at key moments.
- If criminal operations become more autonomous, disrupting their infrastructure and access keys may matter more than arresting individual coordinators.
- Defenders are advised to treat unauthorized AI agents as unmanaged software, using network monitoring, behavioral telemetry, access controls, and automated quarantine.
Article Details
- Topic
- How cybercriminals adapt existing business models and infrastructure to emerging technologies, including AI, and the implications for defenders and law enforcement.