Google Warns AI Is Scaling Criminal and State-Linked Cyber Operations
Summary
Google says criminal and state-linked actors are using AI to accelerate and scale cyber operations, including credential theft, reconnaissance, social engineering and malware development. Its response includes disrupting accounts and hardening models.
Key points
- Google says TeamPCP used an AI coding chatbot and agent instructions to plan and execute a mass credential-harvesting campaign in under six hours.
- Since March 2026, TeamPCP has targeted PyPI, npm and Docker Hub, and developed the Dustmaker credential stealer, Shai-Hulud and Miasma.
- Google describes AI use by state-linked actors for target profiling, localized social-engineering lures, malware development and post-exploitation activity.
- Examples include PRC-nexus Basin Castle and Ravine Castle, Iran-backed Calanque Ion (APT42), and DPRK-nexus Midnight Neptune (UNC1069).
- Google says it disables projects and accounts linked to adversarial operations and has deployed real-time defenses against unauthorized model distillation.
Article Details
- Event Type
- Google Threat Intelligence Group report on criminal and state-sponsored threat actors using AI to automate and scale cyberattacks.
- Impact
- AI is enabling faster, larger-scale credential harvesting, supply-chain compromises, reconnaissance, social engineering, malware development, exploitation, post-exploitation activity, influence operations, and cryptocurrency theft. Google says it disables associated projects and accounts and has deployed defenses against model-extraction attacks. No specific victim losses or quantified impact are reported.
MITRE ATT&CK
T1059 · Command and Scripting InterpreterBasin Castle used AI to troubleshoot post-exploitation commands.T1566 · PhishingCalanque Ion crafted localized pretext lures for social engineering; the article does not specify a delivery channel.T1583.006 · Web ServicesRavine Castle researched methods for anonymizing data leaks for downstream dissemination.T1587.001 · MalwareBasin Castle used AI to author obfuscated custom malware.T1589 · Gather Victim Identity InformationCalanque Ion used generative AI to identify target email addresses.T1589.002 · Email AddressesCalanque Ion used generative AI to identify target email addresses.T1593 · Search Open Websites/DomainsCalanque Ion conducted OSINT research to support targeting.T1598 · Phishing for InformationTeamPCP conducted a mass credential-harvesting campaign; the article does not specify the collection method.T1657 · Financial TheftRavine Castle used Gemini to generate politically charged propaganda as part of influence operations.
Threat Actors
APT24The article identifies APT24 as an alternate name for Ravine Castle, a PRC-nexus threat actor.BASIN CASTLEPRC-nexus threat actor reported using LLMs for target profiling, localized social-engineering lures, malware authoring, and post-exploitation troubleshooting.CALANQUE IONIran-backed group reported using generative AI for target email discovery, OSINT research, and localized pretext lures. The article identifies Calanque Ion as APT42.MIDNIGHT NEPTUNEDPRK-nexus actor reported as increasingly integrating AI into operations supporting cryptocurrency theft. The article identifies Midnight Neptune as UNC1069.RAVINE CASTLEPRC-nexus threat actor reported using Gemini across its attack lifecycle and for influence operations. The article identifies Ravine Castle as APT24.TeamPCPThreat actor that used an AI coding chatbot and agent instructions to conduct a mass credential-harvesting campaign and compromised open-source supply-chain targets. The article identifies TeamPCP as UNC6780.UNC1069The article identifies UNC1069 as an alternate name for Midnight Neptune, a DPRK-nexus actor involved in cryptocurrency theft.UNC6508PRC-nexus threat actor reported by GTIG as conducting a multi-year cyberespionage campaign targeting academic, medical, and military research institutions in North America.
Malware
DUSTMAKERIt has also implemented more than half a dozen different methods to target or exploit AI tools and open source software development practices, some of which are embedded within its Dustmaker credential stealer software.MiasmaTeamPCP also developed Shai-Hulud and Miasma, both of which are publicly available. GTIG believes “The publicity, apparent success, and open-source release of UNC6780’s malware will likely spur adversary emulation ofShai-HuludTeamPCP also developed Shai-Hulud and Miasma, both of which are publicly available. GTIG believes “The publicity, apparent success, and open-source release of UNC6780’s malware will likely spur adversary emulation of
Vendors
Products
Countries
DPRKMidnight Neptune (UNC1069) is a DPRK-nexus actor that has increasingly integrated AI across its operational lifecycles to support cryptocurrency theft.IranCalanque Ion (aka APT42), an Iran-backed group, has used gen-AI (including Gemini) to identify target email addresses, conduct OSINT research, and translate content across local languages to craft localized pretextNorth AmericaIn June 2026, GTIG reported on a multi-year cyberespionage campaign by UNC6508, a People’s Republic of China (PRC)-nexus threat actor, targeting academic, medical, and military research institutions in North America.People’s Republic of ChinaIn June 2026, GTIG reported on a multi-year cyberespionage campaign by UNC6508, a People’s Republic of China (PRC)-nexus threat actor, targeting academic, medical, and military research institutions in North America.
Industries
CryptocurrencyMidnight Neptune (UNC1069) is a DPRK-nexus actor that has increasingly integrated AI across its operational lifecycles to support cryptocurrency theft.Military researchIn June 2026, GTIG reported on a multi-year cyberespionage campaign by UNC6508, a People’s Republic of China (PRC)-nexus threat actor, targeting academic, medical, and military research institutions in North America.