Microsoft Unmasks Cybercriminals Behind AI Deepfake Network in Landmark Lawsuit

Microsoft Identifies Key Players in AI Abuse Scheme

In a significant development in the fight against AI misuse, Microsoft has amended a lawsuit to name four individuals allegedly involved in a global cybercrime network known as Storm-2139. The tech giant accuses these developers of bypassing safety guardrails on its AI tools to generate harmful content, including celebrity deepfakes 1

1

The named defendants are:

• Arian Yadegarnia aka "Fiz" from Iran
• Alan Krysiak aka "Drago" from the United Kingdom
• Ricky Yuen aka "cg-dot" from Hong Kong
• Phát Phùng Tấn aka "Asakuri" from Vietnam

The Storm-2139 Network Structure

Microsoft's investigation revealed that Storm-2139 operates with a three-tiered structure 2

2

1. Creators: Developed tools to bypass AI safeguards
2. Providers: Modified and distributed these tools
3. Users: Employed the tools to generate violating content

The network allegedly exploited exposed customer credentials to access Microsoft's generative AI services, then altered their capabilities to create and sell access for generating illicit content 3

3

Legal Action and Its Impact

Microsoft's lawsuit, filed in December 2024 in the Eastern District of Virginia, initially listed the defendants as "John Does." The recent amendment naming specific individuals marks a significant escalation in the company's efforts to combat AI misuse 4

4

The legal action has already had notable effects:

1. Disruption of operations: A court order allowed Microsoft to seize a key website, hampering the network's activities.
2. Internal conflict: The legal pressure reportedly caused Storm-2139 members to turn on each other.
3. Deterrence: Microsoft aims to discourage others from similar activities through this high-profile case.

Related Stories

Microsoft Takes Legal Action Against Cybercriminals Exploiting Azure AI Services

Microsoft and European police dismantle RedVDS cybercrime service behind $40 million in fraud

Microsoft Disrupts EvilTokens AI-Assisted Platform That Compromised 12,000 Accounts

Microsoft launches AI cybersecurity model after OpenAI hack sparks warning about cyber attacks

Broader Implications for AI Safety

This case highlights the ongoing challenges in ensuring the responsible use of AI technologies. While companies like Microsoft implement safety measures, determined actors can still find ways to circumvent these protections 5

5

The incident has reignited debates within the AI community about the best approaches to AI safety:

1. Closed vs. Open-source models: Some argue that keeping models closed can prevent abuse, while others believe open-source development is crucial for innovation and security.
2. Legal frameworks: The case underscores the need for robust legal mechanisms to address AI-related crimes, with some countries already implementing laws against deepfake creation and distribution.

Ongoing Investigations and Future Actions

Microsoft has indicated that its investigations are ongoing, with at least two additional suspects located in the United States. The company is preparing criminal referrals to both U.S. and foreign law enforcement agencies, signaling a multi-pronged approach to combating AI abuse 3

3

As the legal proceedings unfold, this case is likely to set important precedents for how tech companies and legal systems address the misuse of AI technologies in an increasingly AI-driven world.