FBI Warns: China Leverages AI to Enhance Cyberattacks on US Infrastructure

China's AI-Enhanced Cyber Threat to US Infrastructure

The FBI has issued a stark warning about the increasing use of artificial intelligence (AI) by Chinese state-sponsored hackers to enhance their cyberattacks on US critical infrastructure. FBI Deputy Assistant Director Cynthia Kaiser highlighted China as the most significant threat, stating that Beijing-backed crews are testing AI at every stage of the attack chain 1

1

AI-Driven Attack Strategies

Chinese hackers are leveraging AI to improve various aspects of their operations:

1. Network Mapping: AI helps attackers navigate internal systems more effectively once they gain access 1

   1

   .
2. Spear-Phishing: Large language models are used to craft more convincing phishing messages 2

   2

   .
3. Fake Profiles: AI is employed to create fictitious business profiles at scale for social engineering campaigns 1

   1

   .

While these AI applications make attacks more efficient and faster, Kaiser noted that they are not yet being used for fully automated, end-to-end attacks 2

2

Recent High-Profile Breaches

The FBI's warning comes in the wake of significant cyberattacks attributed to Chinese state-sponsored groups:

1. Volt Typhoon: Compromised hundreds of outdated routers to create a botnet for infiltrating US infrastructure 2

   2

   .
2. Salt Typhoon: Breached at least nine US telecommunications companies and government networks, recently targeting over a thousand internet-facing Cisco devices 2

   2

   .

Attack Methodology and Persistence

Chinese hackers often gain initial access through unsophisticated means, exploiting unpatched vulnerabilities or end-of-life devices. Once inside a network, they operate stealthily, moving laterally from business networks to operational technology 1

1

Kaiser emphasized the attackers' ability to remain undetected for extended periods, sometimes years, before discovery 1

1

Related Stories

AI-Powered Cyberattacks on the Rise: Russia, China, and Others Escalate Digital Threats

Five Eyes Alliance Warns AI Cyber Risks Will Transform Hacking in Months, Not Years

Agentic AI Completes Enterprise Breach in 10 Hours, Leaves 80-Page Security Audit

CrowdStrike's 2025 Global Threat Report: China's Cyber Espionage Surges Amid Rising AI-Driven Threats

Deepfake Threats and Social Engineering

The FBI also warned about the increasing use of deepfake technology in social engineering attacks. Criminals are using AI-generated videos to impersonate executives and trick employees into making fraudulent wire transfers or joining malicious online meetings 1

1

Defensive Measures

To counter these evolving threats, the FBI recommends:

1. Robust network security to prevent initial access 1

   1

   .
2. Internal network segmentation to limit lateral movement 1

   1

   .
3. Multi-factor authentication (MFA) for all systems, including low-tech methods like secret words for verifying high-stakes requests 1

   1

   2

   2

   .

As AI continues to evolve, both attackers and defenders are exploring its potential in the cybersecurity landscape. The FBI remains vigilant, tracking AI adoption across different countries and stages of cyber operations to stay ahead of emerging threats 2

2