Amerikalik blokcheyn tahlil firmasi Chainalysis o'zining kiberxavfsizlik hodisasi nishoni bo'lganini aytdi, bunda tashqi aktor nozik (nozik bo'lmagan) mijoz ma'lumotlariga kirish huquqiga ega bo'ldi.
Biroq, kompaniya buzilish uning tergov mazmuniga, autentifikatsiya ma'lumotlariga yoki sessiya tokenlariga ruxsatsiz kirish bilan natijalanmaganini ta'kidladi.
"Shu oyda Chainalysis tashqi aktor hujumkor agentik usullaridan foydalanib Chainalysis tizimlari va ichki vositalariga ruxsatsiz kirish huquqiga ega bo'lganini aniqladi," deb aytdi Chainalysis juma kuni.
"Bizning platformamizda ta'minlangan foydalanuvchilar uchun foydalanuvchi IDlari, to'liq ismlar, elektron pochta manzillari va tashkilot roli yorliqlari kabi ba'zi nozik bo'lmagan mijoz ma'lumotlari, shu jumladan sizning tashkilotingiz va foydalanuvchilaringizga tegishli bunday ma'lumotlar kirish huquqiga ega bo'ldi."
Kompaniya hodisaga javoban zaifliklarni tuzatish va tizimlarini mustahkamlash ustida ishlayotganini aytdi.
"Hujumkor agentik usullar" eslatmasi hujumni amalga oshirish uchun sun'iy intellekt (SI) bilan quvvatlangan vosita ishlatilganini ko'rsatadi, garchi Chainalysis qo'llanilgan aniq usullar yoki taktikalar haqida hech qanday tafsilot bermagan bo'lsa ham.
"Biz AI bilan boshqariladigan kiberhujumlarning sanoat miqyosida o'sishini kuzatmoqdamiz va bizning xavfsizlik pozitsiyamiz rivojlanayotgan muhit va mijozlarimiz kutgan natijalarga mos kelishini ta'minlash uchun butun kompaniya yondashuvini qo'llamoqdamiz," deb aytdi u.
Bu rivojlanish dushmanlik maqsadida AI dan foydalanish so'nggi oylarda tezlashgani bilan bir vaqtda sodir bo'ldi, turli tahdid aktorlari texnologiyadan hujum hayot siklining turli bosqichlarini avtomatlashtirish va bir nechta sohalardagi yuzlab tashkilotlarni nishonga olish uchun foydalanmoqda.
Bunga Xitoy davlat tomonidan qo'llab-quvvatlanadigan Vapor Panda nomli tahdid guruhi ham kiradi, u ARTEX, agentik penetratsion sinov tizimi, yordamida keng ko'lamli hujumlarni amalga oshirmoqda va keng kirish operatsiyasi doirasida 11 kun ichida taxminan 140 nishonni buzib kirgan.
"AI asosan o'rnatilgan hujumlarni tezroq, shaxsiylashtirilgan va osonroq kengaytiriladigan qilib yaxshilaydi," deb aytdi Abnormal AI. "Agentik kirish zanjirlari va prompt injection (so'rov in'ektsiyasi) yanada o'ziga xosdir, chunki ular to'g'ridan-to'g'ri joylashtirilgan SI tizimlariga bog'liq."
American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data.
However, the company noted that the breach did not result in unauthorized access to its investigation content, authentication credentials, or session tokens.
"This month, Chainalysis detected an external actor using offensive agentic techniques to gain unauthorized access to Chainalysis systems and internal tools," Chainalysis said Friday.
"Some non-sensitive customer data, such as user IDs, full names, email addresses, and organization role labels for users provisioned on our platform were accessed, including such information relating to your organization and users."
The company said it's patching vulnerabilities and hardening its systems in response to the incident.
The mention of "offensive agentic techniques" indicates that an artificial intelligence (AI)-powered tool was used to execute the attack, although Chainalysis offered no details on the specific methods or tactics employed.
"We are seeing an industry-wide rise in AI-driven cyber attacks, and we are taking a whole-of-company approach to make sure our security posture meets the evolving environment and our customers' expectations," it said.
The development comes as adversarial use of AI has ramped up in recent months, with various threat actors using the technology to automate different stages of the attack lifecycle and target hundreds of organizations across multiple industries.
This includes a China state-backed threat group known as Vapor Panda, which is using ARTEX, an agentic penetration testing framework, to conduct attacks at scale, compromising about 140 targets in a span of 11 days as part of broad access operation.
"AI mainly improves established attacks by making them faster, more personalized, and easier to scale," Abnormal AI said. "Agentic intrusion chains and prompt injection are more distinct because they depend directly on deployed AI systems."
Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post.