How Cybercriminals Are Using AI: Impacts on Security and Defenders

Nov 29 / Vijay Ram


The Growing Role of AI in Cybercrime

Artificial Intelligence (AI) is becoming an increasingly powerful tool in cybersecurity, both for defenders and cybercriminals. While AI can significantly enhance cybersecurity defenses, it is also being exploited by criminals to execute sophisticated attacks. In 2024, understanding how AI is used by cybercriminals is crucial for IT and cybersecurity professionals. This article will explore the four main ways cybercriminals are using AI, how it impacts cybersecurity, and how defenders are countering these threats.



1. Improving Malware Coding with AI

Just as developers use GenAI tools like ChatGPT to streamline coding processes, cybercriminals are leveraging AI to enhance their malware creation. While AI-generated malware code isn't flawless yet, these tools allow attackers to write cleaner, more effective code. AI assists cybercriminals in reducing errors and developing more advanced malware strains, making them harder to detect and more efficient in evading security measures.

However, it's important to note that despite these advances, no fully AI-generated malware has been observed to date. The technology is still evolving, and cybercriminals are utilizing AI as a support tool to improve their efforts rather than relying on it entirely.



2. Building AI into Criminal Software: Phishing Emails and More

One of the most common uses of AI in cybercrime today is in crafting phishing emails. AI tools, such as ChatGPT, enable cybercriminals to write highly persuasive phishing emails in multiple languages. These emails often come with impeccable grammar and spelling, making them more convincing and difficult to detect.

GenAI tools help criminals easily tailor phishing emails to their target audience, making scams much harder to identify. This development in criminal software is concerning for cybersecurity professionals, as phishing attacks remain one of the most effective ways for cybercriminals to breach systems.



3. Jailbreak-as-a-Service: Disabling AI Security Protocols

Another innovative use of AI by cybercriminals is "Jailbreak-as-a-Service." These services focus on disabling security protocols within AI tools, allowing malicious actors to revert these tools to their basic settings. This process removes security features built into the interfaces, opening doors for further exploitation.

Since security is not inherently built into GenAI tools, but rather into their interfaces, cybercriminals can bypass these protections to create more malicious content. Jailbreaking AI tools essentially lowers the barriers for cybercriminals, offering them a more streamlined and efficient way to launch cyberattacks.



4. Deepfakes and AI-Driven Impersonation

Deepfakes are another troubling use of AI in cybercrime. AI is used to create hyper-realistic impersonations, enabling criminals to exploit individuals for financial gain or to execute schemes like business email compromise (BEC), virtual kidnapping, and sextortion.

One example is the Russian deepfake tool called ‘Melvin’, which allows cybercriminals to impersonate individuals convincingly. This creates a dangerous situation for businesses and individuals, as AI-generated impersonations can be used to bypass security protocols, manipulate victims, or facilitate illegal activities.



AI: A Double-Edged Sword in Cybersecurity

While AI has been embraced by cybercriminals, it's also being employed on the defensive side of cybersecurity. Despite the uses of AI by attackers, no completely novel AI-driven cyberattacks have emerged as of 2024. This is due, in part, to the fact that cybercriminals are reluctant to take significant risks in adopting new, unproven technologies. They prefer easy, cost-effective methods that ensure maximum return on investment.

However, on the defender's side, AI is rapidly being integrated into cybersecurity tools and protocols. Industry investment into AI for threat detection, network defense, and automated response systems is growing exponentially. As McArdle, a cybersecurity expert, notes, the next two years will see AI-enhanced defense capabilities surpassing the tools used by attackers, offering cybersecurity professionals an upper hand.



How AI Benefits Cyber Defenders

AI tools are not just being used by criminals. They are also transforming the role of defenders in several ways:

Digital Assistants for Security Teams

AI is enabling defenders to automate many routine tasks, such as generating internal reports, log analysis, and forensics. This frees up valuable time and resources, allowing security teams to focus on more critical tasks and respond to threats more swiftly.

Faster Threat Detection and Response

With AI, defenders can quickly analyze large volumes of data to detect anomalies and potential threats. This capability allows for quicker response times, reducing the likelihood of a successful cyberattack.

Predictive Analysis and Threat Intelligence

AI-powered tools can predict emerging threats based on historical data and patterns. By leveraging AI for predictive analysis, cybersecurity professionals can stay ahead of cybercriminals, making proactive adjustments to their defense strategies.



How Cybersecurity Professionals Can Adapt to AI-Driven Threats

As AI continues to shape the cybersecurity landscape, it's essential for professionals in the field to adapt. Here are a few strategies to stay ahead of AI-driven cybercrime:


  1. Invest in AI Tools: Make use of advanced AI tools that can automate threat detection and response, giving you a competitive edge in defending against cybercriminals.

  2. Educate and Train Your Team: Ensure your team understands how AI is being used by both attackers and defenders. Training and continuous learning are essential to staying one step ahead.

  3. Monitor AI Developments in Cybercrime: Stay informed about new AI-driven tactics used by cybercriminals and adjust your security protocols accordingly.

  4. Embrace AI Ethics: Understand and implement ethical guidelines for using AI tools, ensuring that security measures are built into all tools you use.


Conclusion: AI as a Game-Changer in Cybersecurity

AI is a double-edged sword in cybersecurity. While it offers exciting opportunities for cybercriminals to enhance their attacks, it also provides defenders with powerful tools to protect against these threats. By investing in AI-driven security tools, educating cybersecurity professionals, and staying ahead of evolving trends, organizations can ensure they are prepared for the future of cyber threats.



 
Stay ahead of AI-driven threats. Contact us for more details on how AI tools can enhance your cybersecurity strategy and protect your organization from evolving cybercriminal tactics.