AI Is Handing Hackers Tools That Once Belonged to Elite Attackers

2026-6-4 08:37

Anthropic found that artificial intelligence (AI) now performs advanced attack tasks on behalf of unsophisticated hackers, work that once required great technical skill, weakening the long-standing link between an attacker’s expertise and the danger they pose.

The conclusion is based on a year-long study of 832 banned accounts. It signals a lower barrier for attacks on crypto infrastructure as basic actors gain elite capabilities.

AI Pushes More Hackers Up On The Risk Tier, Anthropic Finds

Anthropic published the findings in a report. The data covers accounts banned between March 2025 and March 2026. 

The report noted that security teams long judged threat levels by how many techniques or what tools an attacker used. Anthropic says that the signal no longer holds.

“Now that AI can perform highly technical tasks on an actor’s behalf, there’s little correlation between the skill of a threat actor and how many techniques they use,” the Frontier Red team said.

The least-skilled actors averaged about 16 techniques. The most skilled averaged about 20. The platform used, whether Claude Code, an API, or a chat tool, also showed no link to risk.

“What often helps distinguish higher-risk actors is where in the attack life cycle they apply AI…But even that signal is already eroding,” the team added.

Follow us on X to get the latest news as it happens

new anthropic AI cyberattack report confirms the skill-gap needed to execute a major exploit has basically been reduced to zero

the share of medium-high risk attackers has grown from 33-56% in < 12 months

– anthropic studied 832 banned accounts that executed cyberattacks using… https://t.co/GPiS7hhavs pic.twitter.com/yUdt0lPA8T

— Ejaaz (@cryptopunk7213) June 3, 2026

The report also found that attackers are increasingly deploying AI deeper into the attack chain. While AI-assisted phishing activity declined by 8.6%, AI-assisted account discovery within compromised networks increased by 8.9%. 

Anthropic said AI is now being used to support “operationally demanding techniques” such as privilege escalation, lateral movement, and account discovery, tasks that were previously limited to more technically capable attackers.

As a result, the share of actors classified as medium risk or higher rose from 33% in the first half of the study period to 56% in the second half, marking a 1.7-fold increase.

Among the 832 banned accounts analyzed, 67.3% used AI to assist in malware development, while 6.5% used it for lateral movement within compromised systems. 

The findings are particularly relevant for the crypto industry, where cyberattacks continue to escalate. By reducing the expertise needed to carry out complex operations, AI is enabling a wider range of threat actors to target exchanges, protocols, and digital wallets.

The crypto sector has already seen a rise in security incidents. In May 2026 alone, the industry recorded 40 major hacks, resulting in substantial losses.

Subscribe to our YouTube channel to watch leaders and journalists provide expert insights

The post AI Is Handing Hackers Tools That Once Belonged to Elite Attackers appeared first on BeInCrypto.

origin »

Bitcoin price in Telegram @btc_price_every_hour

POLY AI (AI) на Currencies.ru

$ 9.75E-5 (+0.00%)
Объем 24H $0
Изменеия 24h: 0.00 %, 7d: 0.00 %
Cегодня L: $9.75E-5 - H: $9.75E-5
Капитализация $223 Rank 99999
Доступно / Всего 2.282m AI

once hackers weakening work long-standing skill technical

once hackers → Результатов: 56


Фото:

SBI VC Trade to acquire DMM Bitcoin assets after the $320M BTC hack fallout

In a significant shakeup within Japan’s cryptocurrency landscape, DMM Bitcoin, once a burgeoning crypto exchange, has announced its closure following a devastating security breach. Back in May 2024, DMM Bitcoin suffered what has been termed as one of Japan’s largest crypto leaks, with hackers making off with over 4,500 Bitcoin, valued at approximately $320 million […]

2024-12-27 16:33


Фото:

Hackers like Lazarus continue to use Tornado Cash despite US sanctions

Blockchain analytics firm Elliptic revealed that the North Korea-backed hacker group Lazarus is once again using sanctioned crypto mixer Tornado Cash to obfuscate its transactions. Last year, the group ceased using the crypto mixer after US government sanctions, which were imposed due to allegations of aiding criminals in laundering illegally obtained digital assets.

2024-3-15 21:43


Hackers Mess With South Korea’s YouTube Channel To Play Elon Musk Crypto Video

According to local media sources, the official South Korean government YouTube channel was hacked on Saturday to show a video of SpaceX CEO Elon Musk discussing cryptocurrencies. Yonhap News reports that once the hackers gained access to this channel’s controls, they renamed it “SpaceX Invest” to make it appear to be affiliated with Musk’s aerospace […]

2022-9-5 17:50


Security Consultant Reveals Coinomi Wallet Vulnerability, $60,000+ in Crypto Allegedly Hacked

Cryptocurrency wallet Coinomi has once again become involved in a security scandal, with a security consultant claiming to have found a vulnerability in the service. Allegedly, the service would send wallet seed phrases, the backup information needed to recover a crypto wallet, to servers unencrypted—allowing hackers to potentially intercept the data and steal a user’s […] The post Security Consultant Reveals Coinomi Wallet Vulnerability, $60,000+ in Crypto Allegedly Hacked appeared first on CryptoSlate.

2019-2-28 09:03


Фото:

Watch out for this new cryptocurrency ransomware stalking the web

Researchers have discovered “Anatova”, a brand new family of cryptocurrency-fuelled ransomware, and they warn it has the potential to become outright dangerous. Cybersecurity firm McAfee explained Anatova hides in seemingly innocuous icon files – usually the same popular games or applications – in order to fool the user into downloading the malware.

2019-1-23 19:58