Google's Threat Intelligence Group (GTIG) reported on Monday that it successfully thwarted an attempt by malicious actors to use artificial intelligence models for a large-scale vulnerability exploitation operation.
Details of the Threat
The GTIG stated it has "high confidence" that it intercepted hackers utilizing an AI model. This model was reportedly used to discover and exploit a zero-day vulnerability—a software flaw unknown to developers—specifically to bypass two-factor authentication (2FA).
- Objective: The criminal threat actor intended to use the exploit in a "mass exploitation event."
- Intervention: Google's proactive counter-discovery efforts are credited with potentially preventing the exploit's use.
- Scope: Google did not disclose the name of the hacking group involved, nor did it confirm that its proprietary Gemini model was compromised.
Industry Concerns Over AI Exploitation
The findings underscore a growing and significant threat: hackers are increasingly leveraging readily available AI tools, such as OpenClaw, to exploit software weaknesses. These methods pose substantial risks to corporations, government agencies, and other organizations, despite massive investments in cybersecurity defenses.