Page 7 - EngineerIT AugustSeptember Issue 2026

CYBERSECURITY

AI is transforming attacker operations
Kaspersky experts report that threat actors are
increasingly integrating AI into different stages
of their operations. Large language models Emerging trends shaping the cyber threat landscape
are already being used to generate phishing In addition to the growing use of AI by cybercriminals, Kaspersky
emails, malicious code and supporting experts identified several trends that organisations should
operational content. monitor closely:
• AI-driven malware evolution: generative models can rewrite
AI is also beginning to play a larger role in malware in different languages or architectures, making
malware development. Modern language malicious code harder to detect, and faster to deploy at scale.
models are capable of generating substantial • Cloud-based data exfiltration: attackers increasingly route stolen
portions of malicious software, from initial code data through legitimate cloud and file-sharing services to blend
scaffolding to functional modules. Researchers in with normal traffic.
have already observed AI-assisted malware • Ransomware targeting operations: some groups disrupt
development in campaigns linked to the production and business processes, not just encrypt data, to
FunkSec group, which deployed Rust-based increase pressure for payment.
malware capable of data theft, encryption • AI agents as persistence mechanisms: some AI agent solutions
and process manipulation. Similarly, during the are granted broad or even full system access. If compromised,
RevengeHotels campaign in 2025, threat actors attackers could modify the system prompt or the agent’s
used large language models to generate configuration, for example, causing it to download a payload on
portions of the infector and downloader code. every startup.
• Malicious AI skills become a new attack vector: as AI agents gain
"We expect AI to remain one of the key factors broader access to enterprise systems, attackers start to exploit
shaping the threat landscape in 2026, as compromised skills to manipulate agent behaviour, steal sensitive
we already see how it is reshaping attacker data, execute unauthorised actions, and establish persistent
workflows and accelerating their operations," access. This creates a new layer of risk where trusted AI tools can
said Sergey Lozhkin, Head of Global Research be turned into powerful mechanisms for cyberattacks.
and Analysis Team in APAC and META regions
at Kaspersky. "By lowering the time and cost As cyberthreats continue to evolve alongside emerging technologies,
required to develop and adapt malicious Kaspersky recommends that organisations strengthen their
tools, AI allows threat actors to iterate faster cybersecurity posture through continuous vulnerability management,
and scale their efforts. Defenders should be timely patching, employee awareness training, threat intelligence, and
prepared for quicker shifts in tactics." advanced security solutions.

7 | EngineerIT August/September 2026