AI-Driven Ransomware Campaign Targets Latin American Enterprises

• •AI coding assistants are being weaponized in ransomware attacks across Latin America.
• •Over two dozen organizations have been affected, with significant data theft reported.
• •QRishing activity in Mexico accounts for nearly 70% of incidents in Latin America.

A ransomware affiliate known as Azazel has utilized an AI coding assistant to conduct attacks within enterprise networks, affecting over two dozen organizations across six countries, including Mexico. The campaign, linked to the Gentlemen ransomware group, involved the use of stolen development credentials and remote command execution, leading to significant data theft. Reports indicate that AI-assisted ransomware has reached Mexico, with a notable increase in QRishing activities, where nearly 70% of such incidents in Latin America originated. The attacks have impacted various sectors, including logistics, insurance, and pharmaceuticals. Additionally, South Korean authorities are investigating similar attacks against financial institutions, where AI agents exploited vulnerabilities, resulting in data breaches affecting 68,000 individuals. The growing trend of AI-assisted cyber threats highlights the need for organizations to bolster their defenses against increasingly sophisticated attacks.