亚马逊(AMZN.US)报告揭露：一黑客团伙凭AI工具五周横扫600个防火墙

Core Insights - A recent security report from Amazon reveals that a small group of hackers has exploited widely available AI tools to breach over 600 firewalls across multiple countries in the past five weeks [1][2][3] - The report indicates that these hackers, potentially operating as a single individual, have utilized commercial generative AI services to quickly exploit weak security measures, such as simple login credentials or single-factor authentication [1][2] Group 1 - The technology used by these intruders has enabled them to conduct large-scale firewall breaches that would typically require a larger, more skilled team [2] - Hackers have leveraged their access to security devices to further infiltrate victim networks, suggesting a preparation for ransomware attacks [2][3] - Affected devices are located in regions including South Asia, Latin America, the Caribbean, West Africa, Northern Europe, and Southeast Asia [3] Group 2 - Amazon describes these widespread intrusion events as economically motivated, marking a new case of hackers using AI to simplify and accelerate cyberattacks [3] - The report does not disclose the specific AI tools used by the hackers or name the victims [3] - CJ Moses, head of Amazon's security engineering and operations, stated that this represents an "AI-driven cybercrime assembly line," allowing less skilled individuals to conduct large-scale attacks [3][5] Group 3 - Researchers believe that these hackers are not targeting specific industries but are opportunistically attacking poorly protected firewall devices [3] - Moses noted that if faced with stronger security measures, hackers would shift their focus to other targets, and even if they gain internal network access, they can only execute the simplest, automated attack paths [3] - Last year, hackers utilized technology from the American AI startup Anthropic to carry out a large-scale cybercrime operation affecting at least 17 organizations [4] Group 4 - Anthropic described this incident as the first large-scale weaponization of commercial AI tools by attackers, a "unprecedented" case [5] - Amazon anticipates an increase in such incidents, with Moses stating that organizations should expect a rise in AI-enhanced threat activities from both skilled and unskilled attackers [5]