Researchers find AI agents used by ransomware affiliates in intrusion ecosystem

Cybersecurity researchers identified an AI‑driven intrusion ecosystem operated by affiliates of the INC and The Gentlemen ransomware groups, centered on an “Autonomous Red Team Kill Chain Framework” called Phantom. The threat actor, assessed as Russian‑speaking, functions as both intrusion and data‑extortion operator.