LLMHigh
FBI Reports AI Use by Threat Actors in Broader Cyber Context Including Infrastructure Intrusions
- Occurred
- Apr 29, 2025
- Published
- Nov 28, 2025
- Source
- AI Incident Database
Summary
FBI Deputy Assistant Director Cynthia Kaiser stated that adversarial actors, particularly those affiliated with China and organized cybercriminal groups, are increasingly integrating AI tools across the cyberattack lifecycle, with documented use cases reportedly including purported AI-generated spear phishing, business identity fabrication, internal network mapping, and deepfake-enabled fraud. The tools are allegedly already assisting intrusions targeting U.S. infrastructure.
Developers
- Generative AI developers
Deployers
- Government of China
- Chinese Communist Party
Harmed parties
- United States critical infrastructure
- Private companies
- Government agencies
- Employees targeted by phishing
- Employees targeted by deepfake impersonations
Tags
- pattern of harm
- state-affiliated actor
- nation-state attack
- cybersecurity
- espionage
- ongoing
- large language model
- deepfake
- AI-assisted targeting
- AI-generated content
- AI for reconnaissance
- AI-enabled spearphishing
- spear phishing
- social engineering
- network mapping
- business impersonation
- fraud
- AI-enhanced lateral movement
- adversarial use of AI
- multistage attack chain
- critical infrastructure
- telecommunications
- energy sector
- end-of-life device exploitation
- credential harvesting
- fake business identity
- China
- Volt Typhoon
- Salt Typhoon
- United States
Classification
Category confidence: 85%
Severity confidence: 90%
Rationale: FBI reports AI tools used for cyberattacks including deepfakes and phishing, indicating significant security threat.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8