F6 and RuStore have issued a warning regarding the rising use of artificial intelligence in cyberattacks. According to F6, attackers are leveraging AI to generate malicious code, identify vulnerabilities, and conduct phishing campaigns. The report highlights that hackers are increasingly using tools like ChatGPT, Gemini, and Claude Code, with ChatGPT appearing over 108,000 times on dark web forums.
A notable trend is the emergence of hybrid APT attacks, where human-led operations utilize AI as a primary tool. In late 2025, the GTG-1002 group used multiple Claude Code instances to automate 80–90% of tactical tasks during a penetration test. Experts note that attackers are also exploiting AI jailbreaking techniques to bypass built-in safety restrictions.
Fraudsters are specifically targeting users seeking free AI services by distributing malicious apps disguised as popular chatbots or voice assistants. These fake applications often mimic legitimate services to steal personal data or gain control over mobile devices. One common scheme involves prompting users to restart their phones and then requesting remote access under the guise of bank security alerts.
To mitigate these risks, security experts advise downloading software exclusively from official stores or verified developer websites. Users should avoid clicking unexpected links in messages or emails and refrain from entering sensitive information on sites found via search engines. If an application requests remote access or suspicious credentials, it should be uninstalled immediately.
