DeepfakeHigh
Global Cybercrime Network Storm-2139 Allegedly Exploits AI to Generate Deepfake Content
- Occurred
- Dec 19, 2024
- Published
- Feb 28, 2025
- Source
- AI Incident Database
Summary
A global cybercrime network, Storm-2139, allegedly exploited stolen credentials and developed custom tools to bypass AI safety guardrails. They reportedly generated harmful deepfake content, including nonconsensual intimate images of celebrities, and their software is reported to have disabled content moderation, hijacked AI access, and resold illicit services. Microsoft disrupted the operation and filed a lawsuit in December 2024, later identifying key members of the network in February 2025.
Developers
- Unidentified Storm-2139 actor from Illinois
- Unidentified Storm-2139 actor from Florida
- Storm-2139
- Ricky Yuen (cg-dot)
- Phát Phùng Tấn (Asakuri)
- Arian Yadegarnia (Fiz)
- Alan Krysiak (Drago)
Deployers
- Unidentified Storm-2139 actor from Illinois
- Unidentified Storm-2139 actor from Florida
- Storm-2139
- Ricky Yuen (cg-dot)
- Phát Phùng Tấn (Asakuri)
- Arian Yadegarnia (Fiz)
- Alan Krysiak (Drago)
Harmed parties
- Victims of deepfake abuse
- OpenAI
- Microsoft
- Celebrities
- Azure OpenAI customers
- AI service providers
Tags
- AI exploitation
- deepfake abuse
- cybercrime
- AI security breach
- hacking
- unauthorized AI access
- Microsoft lawsuit
- digital crimes
- nonconsensual deepfakes
- OpenAI
- Storm-2139
- identity theft
- illicit content generation
- API key theft
- AI guardrail circumvention
- cybersecurity threats
- dark web marketplaces
- criminal AI misuse
- AI policy violations
- response
Classification
Category confidence: 95%
Severity confidence: 90%
Rationale: Incident involves AI-generated deepfake content and nonconsensual intimate images, with Microsoft filing a lawsuit.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8