3AM ransomware affiliate encrypts about 37 machines at UK schools

Reports suggest the attack combined human control with possible AI assistance rather than confirmed full automation. Dark Reading says evidence points to a model generating and revising commands. The attackers spread using Windows tools, stolen backup passwords and fake administrator accounts, according to Cyber Security News.

• BleepingComputer reports that nearly 50 machines were reached from an unmanaged host.

Covered by 3 publishers within 2 hours of the first report.

• BleepingComputer: UK school estate hit by 3AM ransomware in suspected AI-assisted attack

Reporting3

DR Dark Reading 3AM Affiliate Embraces AI-Like Loops in European School Attack · Alexander Culafi 9:00 AM

BC BleepingComputer UK school estate hit by 3AM ransomware in suspected AI-assisted attack · Bill Toulas 9:00 AM

CSN Cyber Security News Hackers Use AI Agents to Launch 3AM Ransomware Attacks Against UK School Networks · Tushar Subhra Dutta 10:55 AM

Related

DE UK cyber agency warns AI ransomware could hit infrastructure by 2028 November 2

SW Artem Stryzhak sentenced to 70 months for ransomware attacks October 27

BC SafePay ransomware breached more than 600 organizations, agencies warn October 20

BC Synology urges NAS updates as C3RB3R ransomware targets outdated software November 2

Topics Ransomware