How Organizations Can Assess AI-Generated Extortion Claims

Summary

Fraudulent extortion groups such as 0APT have used AI-generated victim lists and fake leaked data. The article recommends combining data governance with threat intelligence to assess whether leak claims are credible.

Key points

• 0APT listed dozens of purported victims, but reporting found signs that its victims and leaked data were AI-generated or fake.
• The article says data-theft extortion has become more common, while fabricated leak claims can still impose costs and pressure on defenders.
• Organizations should map where their data is stored, its formats and protections, and how it relates to business partners and vendors.
• Threat intelligence on suppliers and threat actors can help assess whether a claimed leak may involve real data, recycled datasets, or fabrication.
• The article recommends evaluating the reliability of threat actor claims, including through the Diamond Model for threat intelligence.