Ransomware Gang Uses AI Agents for Network Intrusion and Credential Theft

The Aur0ra ransomware group, tracked as GOLD OGRE by Sophos, has been leveraging AI agents to automate network intrusion, credential collection, and privilege escalation within victim networks. The attackers used AI tools like Cursor's Composer and models from Anthropic, xAI, and Moonshot, often bypassing guardrails by framing activities as authorized red team operations.