Google announced it disrupted a criminal hacking group's plan to use artificial intelligence for a mass exploitation attack targeting two-factor authentication bypass through a zero-day vulnerability. The intervention, disclosed by Google's Threat Intelligence Group, offers a concrete look at how AI is reshaping cybersecurity.
Google identified a hacking operation that leveraged AI tools to research and plan the exploitation of a zero-day flaw. The attackers were using AI to find a previously unknown software vulnerability and automate the process of weaponizing it at scale, specifically to defeat 2FA protections. Google's defenses caught and neutralized the attempt before broad deployment.
Google's analysts linked the broader trend of AI-assisted hacking to state-sponsored actors from Iran, China, North Korea, and Russia. These advanced persistent threat (APT) groups have been increasingly integrating AI into operations for reconnaissance, vulnerability research, and task automation.
The threats remain familiar: phishing, malware, credential theft, and 2FA bypass. However, the velocity and scale at which they can be executed is increasing dramatically. Google's AI safeguards have blocked malicious applications across categories including phishing and malware development.
For investors, North Korea's Lazarus Group alone has been linked to billions in crypto theft. A mass 2FA bypass could drain exchange accounts and wallets. Hardware security keys and cold storage offer stronger protection than SMS-based 2FA.