Person
Chief analyst at Google Threat Intelligence Group (formerly Mandiant), known for tracking state-sponsored hacking and cybercrime.
Fitch expects the possibly AI-assisted breaches at nine South Korean banks to bring penalties, compensation costs and higher security spending. No material losses have appeared yet, so the early cost lands on bank budgets while incident counts in Korea and Japan keep rising.
Reality
Google Threat Intelligence Group's September 8 report puts a financially motivated actor, UNC6780, inside PyPI, npm and Docker Hub, publishing under stolen maintainer automation and reselling the AI tool credentials it collects afterwards.
Reality
Mandiant traced the Q2 2026 campaign to an AI coding chatbot, one prompt and a set of agent instructions that ran the scanning pipeline, fixed its own errors and rotated IPs with nobody at the keyboard.
Perspective Coverage
3 publishersReality
A human broke in and assembled the framework, and after that the scanning, the retries and the address rotation ran on their own out of the victim's own IPs. That middle stretch is what response clocks have to survive.
Reality
Anthropic says an AI agent did 80% to 90% of the work in a campaign against roughly 30 companies. CrowdStrike puts average breakout time at 29 minutes. Verification cadence is now the control.
Reality