AI Accelerates Hacking: New Research Reveals Faster Breaches and Shifting Cybercrime Tactics

AI Accelerates Hacking Speed and Efficiency

Recent research by ReliaQuest has revealed a significant shift in the cybercrime landscape, largely driven by the adoption of artificial intelligence (AI) by hackers. The study found that cybercriminals are now able to breach systems faster than ever before, with the average time between initial access and lateral movement reduced to just 48 minutes 1

1

.

Shift from Ransomware to Data Theft

The research indicates a notable change in hacker tactics, moving away from ransomware attacks towards direct data theft. According to the report, 80% of all breaches now involve data exfiltration, while only 20% include encryption 1

1

. This shift suggests that hackers are finding it more profitable to sell stolen data rather than demand ransoms, as fewer than half of ransomware incidents result in payment, and only about 7% of those who pay ever fully recover their information 2

2

.

Emerging Threats and Attack Vectors

The study highlights several evolving attack methods:

1. Phishing remains the top initial access technique, with 30% of these attacks including credential harvesting 1

   1

   .
2. Voice phishing, or "vishing," now accounts for 14% of breaches, particularly targeting the manufacturing sector due to frequent IT interactions and lenient help-desk policies 1

   1

   2

   2

   .
3. AI-powered attacks enable hackers to steal data in as little as four hours and encrypt it within six hours 2

   2

   .

Implications for Cybersecurity Strategies

The findings underscore the need for businesses to reassess their cybersecurity priorities:

1. Focus on protecting data privacy and managing reputational risks, rather than solely on restoring encrypted systems 1

   1

   .
2. Implement defenses to detect and prevent exfiltration attempts 1

   1

   .
3. Develop playbooks that prioritize business continuity and resilience against evolving ransomware tactics 1

   1

   .
4. Incorporate AI and automation into security operations to improve threat detection and response 2

   2

   .
5. Strengthen defenses around common entry points and eliminate blind spots in security infrastructure 2

   2

   .

Positive Developments in Cybersecurity

Despite the challenges, the report also notes progress in defensive capabilities. ReliaQuest claims that by leveraging AI and automation, they have enabled customers to achieve threat containment in as little as three minutes 2

2

. This highlights the potential for AI to enhance cybersecurity measures as well as pose threats.

As the cybercrime landscape continues to evolve, organizations must remain vigilant and adaptive in their approach to security. The integration of AI in both offensive and defensive cybersecurity operations marks a new era in the ongoing battle against digital threats.