gcdRadar
closedclosed 13 May 2025Breaches & attacks3 Confirmed exploitationAI

FBI Reports Adversarial AI Usage in Cyberattacks and Infrastructure Intrusions

The FBI reported that threat actors and state-sponsored groups are increasingly integrating AI tools into reconnaissance, phishing, and infrastructure intrusions. The documented capabilities assist in active cyber operations against targets.

first report
29 Apr 2025
last update
29 Apr 2025

Timeline · 1

  1. 29 Apr 2025FBI Reports AI Use by Threat Actors in Broader Cyber Context Including Infrastructure Intrusions

Sources · 1

Research and catalogues

  1. 2025-04-29

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
AI-enabled attack
categories
AI-assisted intrusionAI phishing / social engineeringDeepfake fraud
severity
3 · Confirmed exploitation
targets
Enterprise deployment
owasp llm top 10
no entry for these categories
dates
happened 29 Apr 2025 · first reported 29 Apr 2025
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.90 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# FBI Reports Adversarial AI Usage in Cyberattacks and Infrastructure Intrusions

https://gcdradar.vercel.app/incidents/fbi-reports-adversarial-ai-usage-in-cyberattacks-and-infrast · AIR-2025-0109 · closed 2025-05-13

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2025-04-29
- AI role: AI-enabled attack

## Summary

The FBI reported that threat actors and state-sponsored groups are increasingly integrating AI tools into reconnaissance, phishing, and infrastructure intrusions. The documented capabilities assist in active cyber operations against targets.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-04-29: FBI Reports AI Use by Threat Actors in Broader Cyber Context Including Infrastructure Intrusions (https://incidentdatabase.ai/cite/1055)

## Sources

- 2025-04-29 AI Incident Database: FBI Reports AI Use by Threat Actors in Broader Cyber Context Including Infrastructure Intrusions https://incidentdatabase.ai/cite/1055

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    FBI Warns of AI Voice Cloning Campaign Targeting Officials

    Breaches & attacks · Exploited · since 15 May 2025

    AI
  2. closed
    AI
  3. closed
    Zoom North Korea-Linked Actors Use AI Executive Deepfakes in Zoom Phishing

    Breaches & attacks · Exploited · since 22 Jun 2025

    AI
  4. closed
    AI
  5. closed
    WhatsApp Scammers Used AI-Cloned Lawyer Voice to Defraud Bank Fideuram

    Breaches & attacks · Real loss · since 23 Feb 2026

    AI
  6. closed
    Australian Analyst Targeted by Scam Using AI-Generated Websites

    Breaches & attacks · Exploited · since 27 Apr 2025

    AI