Researchers uncovered an AI-driven intrusion ecosystem, including an 'Autonomous Red Team Kill Chain Framework' called Phantom, used by affiliates of the INC and The Gentlemen ransomware groups to automate network intrusions and data extortion.
Disclosed 23 October 2026 · Record updated 23 October 2026
AI agents were used to automate intrusion and data-extortion operations as part of ransomware affiliate activity linked to INC and The Gentlemen groups.
IncidentsResearchers say affiliates of the INC and The Gentlemen ransomware groups used an autonomous attack framework called Phantom, uncovered through exposed infrastructure.
23 Oct 2026
