Chris Krebs warns AI cyber
- Former Cybersecurity and Infrastructure Security Agency director Chris Krebs said on April 25 that artificial intelligence is reshaping cyberattacks by automating reconnaissance, speeding intrusion work, and sharpening phishing against companies and governments. - Germany said on April 25 that Russia was likely behind a Signal phishing campaign targeting lawmakers and senior administration officials, with fake support messages used to steal access to private chats and groups. - The warnings land as AI tools lower the cost of tailored attacks and Europe tracks more Russia-linked cyber activity tied to the post-2022 security climate. (techxplore.com)
Artificial intelligence is making cyberattacks faster, cheaper, and easier to scale, former U.S. cyber chief Chris Krebs said on April 25. (aol.com) Krebs, the founding director of the Cybersecurity and Infrastructure Security Agency, said on “Barron’s Roundtable” that AI now helps attackers automate reconnaissance, the early mapping work used to find weak points in a target’s systems. (aol.com) He also said AI is improving phishing, the practice of sending fake messages that trick people into handing over passwords or opening malicious links, because the tools can produce more convincing text at much larger volume. (aol.com) That warning landed as Germany publicly blamed Russia on April 25 for repeated phishing attacks aimed at lawmakers and senior administration officials using the Signal messaging app. (yahoo.com) (straitstimes.com) A German government source said the campaign used fake Signal support messages to capture sensitive information that could let attackers enter private conversations and group chats. German authorities said the campaign had been stopped. (straitstimes.com) (qna.org.qa) German prosecutors opened a spying investigation on April 24, and Tech Xplore, citing Agence France-Presse, reported that targets included members of several parties, civil servants, diplomats, and journalists. (techxplore.com) The basic pattern is simple: AI helps attackers write better bait, sort stolen information faster, and adapt messages to specific people, while phishing still depends on a human target clicking, replying, or sharing a code. (aol.com) (qna.org.qa) Germany has linked earlier cyber activity to Russia before, including the 2015 Bundestag hack and a 2024 campaign against the Social Democrats party executive, and Moscow has denied past accusations. (techxplore.com) Krebs’s point was not that AI replaces hackers. It gives state-backed groups and criminal crews a way to run more tailored campaigns against more targets at the same time. (aol.com) The immediate lesson from both warnings is narrower than the hype: the most useful AI attack may still be a fake message that looks real enough for one person to trust it. (aol.com) (straitstimes.com)
