{"id":12982,"date":"2026-10-09T22:48:13","date_gmt":"2026-10-09T19:48:13","guid":{"rendered":"https:\/\/beta2.socradar.io\/resources\/radar\/major-ai-cyber-attacks\/"},"modified":"2026-10-09T22:48:13","modified_gmt":"2026-10-09T19:48:13","slug":"major-ai-cyber-attacks","status":"publish","type":"page","link":"https:\/\/socradar.io\/es\/resources\/radar\/major-ai-cyber-attacks\/","title":{"rendered":"Principales Ciberataques con IA | SOCRadar Radar"},"content":{"rendered":"\n<section class=\"mai-hero\">\n  <div class=\"mai-hero__container\">\n    <nav class=\"mai-breadcrumb\" aria-label=\"Ruta de navegaci\u00f3n\">\n      <a href=\"\/es\/\">Inicio<\/a><span class=\"mai-breadcrumb__sep\">\u203a<\/span>\n      <a href=\"\/es\/resources\/reports\/\">Recursos<\/a><span class=\"mai-breadcrumb__sep\">\u203a<\/span>\n      <a href=\"\/es\/resources\/radar\/critical-vulnerabilities\/\">Radar<\/a><span class=\"mai-breadcrumb__sep\">\u203a<\/span>\n      <span>Ciberataques con IA<\/span>\n    <\/nav>\n    <h1 class=\"mai-hero__title\">Los principales <span class=\"mai-hero__title-accent\">ciberataques con IA<\/span> registrados a nivel mundial.<\/h1>\n    <p class=\"mai-hero__subtitle\">SOCRadar, el sistema de alerta temprana frente a ciberamenazas, sigue los principales ciberataques con IA y ag\u00e9nticos observados en todo el mundo, desde malware asistido por IA e ingenier\u00eda social con deepfakes hasta intrusiones ag\u00e9nticas totalmente aut\u00f3nomas. Este archivo se actualiza cada dos semanas a medida que salen a la luz nuevos incidentes, en l\u00ednea con nuestra investigaci\u00f3n Agentic Attackers. A continuaci\u00f3n se recoge una selecci\u00f3n de ataques.<\/p>\n    <div class=\"mai-hero__meta\">\n      <span class=\"mai-hero__meta-item\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><rect x=\"3\" y=\"4\" width=\"18\" height=\"18\" rx=\"2\"><\/rect><path d=\"M16 2v4M8 2v4M3 10h18\"><\/path><\/svg> Actualizado cada dos semanas<\/span>\n      <span class=\"mai-hero__meta-item\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 3l1.9 5.1L19 10l-5.1 1.9L12 17l-1.9-5.1L5 10l5.1-1.9z\"><\/path><path d=\"M19 17l.8 2.2L22 20l-2.2.8L19 23l-.8-2.2L16 20l2.2-.8z\"><\/path><\/svg> 66 incidentes con IA<\/span>\n      <span class=\"mai-hero__meta-item\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg> Cobertura 2024-2026<\/span>\n    <\/div>\n  <\/div>\n<\/section>\n\n\n\n<section class=\"mai-yearbar\">\n  <div class=\"mai-yearbar__inner\">\n    <div class=\"mai-years\" role=\"group\" aria-label=\"A\u00f1o\">\n      <button class=\"mai-year-btn is-active\" data-year=\"2026\" aria-pressed=\"true\">2026<\/button>\n      <button class=\"mai-year-btn\" data-year=\"2025\" aria-pressed=\"false\">2025<\/button>\n      <button class=\"mai-year-btn\" data-year=\"2024\" aria-pressed=\"false\">2024<\/button>\n    <\/div>\n    <div class=\"mai-quarters\" role=\"group\" aria-label=\"Trimestre\">\n      <button class=\"mai-quarter-btn is-active\" data-quarter=\"all\" aria-pressed=\"true\">Todos<\/button>\n      <button class=\"mai-quarter-btn\" data-quarter=\"Q1\" aria-pressed=\"false\">T1<\/button>\n      <button class=\"mai-quarter-btn\" data-quarter=\"Q2\" aria-pressed=\"false\">T2<\/button>\n      <button class=\"mai-quarter-btn\" data-quarter=\"Q3\" aria-pressed=\"false\">T3<\/button>\n      <button class=\"mai-quarter-btn\" data-quarter=\"Q4\" aria-pressed=\"false\">T4<\/button>\n    <\/div>\n  <\/div>\n  <div class=\"mai-filters\">\n    <input type=\"search\" class=\"mai-search\" placeholder=\"Busca por objetivo, sistema de IA o actor de amenaza...\" id=\"mai-search\" aria-label=\"Buscar incidentes\">\n    <select class=\"mai-select\" id=\"mai-ai\" aria-label=\"Sistema de IA\">\n      <option value=\"\">Todos los sistemas de IA<\/option>\n      <option value=\"gemini\">Gemini<\/option>\n      <option value=\"openai\">ChatGPT \/ OpenAI<\/option>\n      <option value=\"claude\">Claude<\/option>\n      <option value=\"other\">Otras herramientas y modelos de IA<\/option>\n      <option value=\"unknown\">Sin especificar o sin confirmar<\/option>\n      <option value=\"none\">Sin IA (marca de IA falsa)<\/option>\n    <\/select>\n    <select class=\"mai-select\" id=\"mai-industry\" aria-label=\"Industria\">\n      <option value=\"\">Todos los sectores<\/option>\n      <option value=\"gov\">Administraci\u00f3n y defensa<\/option>\n      <option value=\"tech\">Tecnolog\u00eda<\/option>\n      <option value=\"finance\">Servicios financieros<\/option>\n      <option value=\"crypto\">Criptomonedas<\/option>\n      <option value=\"healthcare\">Sanidad<\/option>\n      <option value=\"telecom\">Telecomunicaciones<\/option>\n      <option value=\"retail\">Consumo y hosteler\u00eda<\/option>\n      <option value=\"education\">Empleo<\/option>\n      <option value=\"cross\">Intersectorial<\/option>\n      <option value=\"unknown\">Sin especificar<\/option>\n    <\/select>\n  <\/div>\n<\/section>\n\n\n\n<section class=\"mai-main\">\n  <div class=\"mai-main__content\">\n\n    <div class=\"mai-card\">\n      <div class=\"mai-table-head\">\n        <h2 class=\"mai-table-head__title\"><span id=\"mai-table-year\">2026<\/span> ciberataques con IA <span class=\"mai-table-head__count\" id=\"mai-table-count\">(30 incidentes)<\/span><\/h2>\n        <a href=\"#\" class=\"mai-csv\" id=\"mai-csv\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 3v12M7 10l5 5 5-5\"><\/path><path d=\"M5 21h14\"><\/path><\/svg> Descargar CSV<\/a>\n      <\/div>\n      <div class=\"mai-table-scroll\">\n        <table class=\"mai-table\" id=\"mai-table\">\n          <thead>\n            <tr>\n              <th>Objetivo \/ Pa\u00eds<\/th>\n              <th>Industria<\/th>\n              <th>Detalles<\/th>\n              <th>Sistema de IA utilizado<\/th>\n              <th>Papel de la IA en el ataque<\/th>\n              <th>Actor de amenaza<\/th>\n              <th>Fuente<\/th>\n            <\/tr>\n          <\/thead>\n          <tbody>\n            <tr data-year=\"2026\" data-quarter=\"Q1\" data-industry=\"tech\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                  <span class=\"mai-target__sub\">empresas de ciberseguridad y defensa<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Ciberseguridad \/ Defensa<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor norcoreano us\u00f3 Gemini para sintetizar OSINT y perfilar objetivos de alto valor en empresas de ciberseguridad y defensa, mapeando puestos y salarios para campa\u00f1as de falsos reclutadores.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Sintetiz\u00f3 OSINT y perfil\u00f3 objetivos para una estafa de reclutamiento<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">UNC2970<\/span>\n                <span class=\"mai-note\">cl\u00faster \u00abOperation Dream Job\u00bb, pr\u00f3ximo a Lazarus<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/distillation-experimentation-integration-ai-adversarial-use\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q1\" data-industry=\"unknown\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Estados Unidos<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--unknown\">Sin especificar (objetivos de pruebas de vulnerabilidad)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor vinculado al Estado chino indujo a Gemini a asumir el papel de experto en ciberseguridad para automatizar el an\u00e1lisis de vulnerabilidades, probando t\u00e9cnicas de RCE, elusi\u00f3n de WAF e inyecci\u00f3n SQL contra objetivos concretos en EE. UU.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Automatiz\u00f3 el an\u00e1lisis de vulnerabilidades y los planes de prueba de exploits<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">APT31<\/span>\n                <span class=\"mai-note\">Zirconium, Violet Typhoon<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/distillation-experimentation-integration-ai-adversarial-use\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q1\" data-industry=\"gov\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Pakist\u00e1n, varios pa\u00edses<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--gov\">Administraci\u00f3n \/ Organizaciones pol\u00edticas<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor vinculado al Estado chino us\u00f3 Gemini y otras herramientas de IA para elaborar dosieres detallados sobre personas en Pakist\u00e1n y recopilar datos de organizaciones separatistas en varios pa\u00edses.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini y otras herramientas de IA<\/span>\n                <span class=\"mai-note\">sin especificar<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Elabor\u00f3 dosieres de objetivos e inteligencia organizativa<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">Temp.HEX<\/span>\n                <span class=\"mai-note\">RPC, vinculado a Mustang Panda<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/distillation-experimentation-integration-ai-adversarial-use\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q1\" data-industry=\"unknown\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global \/ Sin especificar<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--unknown\">Sin especificar<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor vinculado al Estado chino recurri\u00f3 intensamente a Gemini varios d\u00edas por semana para depurar c\u00f3digo, investigar t\u00e9cnicas y desarrollar capacidades de intrusi\u00f3n, incluido el inter\u00e9s por la auditor\u00eda ag\u00e9ntica de c\u00f3digo.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Depuraci\u00f3n continua de c\u00f3digo y desarrollo de capacidades<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">UNC795<\/span>\n                <span class=\"mai-note\">RPC, designaci\u00f3n de GTIG<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/distillation-experimentation-integration-ai-adversarial-use\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q1\" data-industry=\"gov\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Ucrania<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--gov\">Defensa<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor no identificado us\u00f3 Gemini para buscar credenciales de cuentas sensibles y direcciones de correo; esas cuentas fueron atacadas despu\u00e9s en una campa\u00f1a de phishing contra el sector de defensa ucraniano.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Recopil\u00f3 credenciales y correos de objetivos antes de la campa\u00f1a de phishing<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">UNC6418, designaci\u00f3n de GTIG<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/distillation-experimentation-integration-ai-adversarial-use\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q1\" data-industry=\"crypto\" data-ai=\"other\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global \/ Sin especificar<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--crypto\">Criptomonedas<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor con motivaci\u00f3n econ\u00f3mica cre\u00f3 el kit de phishing \u00abCOINBAIT\u00bb con la plataforma de IA Lovable, como evidencian el c\u00f3digo propio de Lovable y los artefactos de alojamiento de im\u00e1genes hallados en las muestras.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--other\">Lovable AI<\/span>\n                <span class=\"mai-note\">plataforma de creaci\u00f3n de apps<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Construy\u00f3 la app e infraestructura del kit de phishing<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">UNC5356<\/span>\n                <span class=\"mai-note\">motivaci\u00f3n econ\u00f3mica, designaci\u00f3n de GTIG<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/distillation-experimentation-integration-ai-adversarial-use\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q1\" data-industry=\"cross\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                  <span class=\"mai-target__sub\">m\u00e1s de 90 organizaciones<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--cross\">Intersectorial<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">CrowdStrike detect\u00f3 que los adversarios inyectaron prompts maliciosos en herramientas leg\u00edtimas de IA generativa en m\u00e1s de 90 organizaciones para generar comandos de robo de credenciales y criptomonedas.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">Herramientas leg\u00edtimas de IA generativa sin especificar<\/span>\n                <span class=\"mai-note\">con inyecci\u00f3n de prompts<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Gener\u00f3 comandos para robar credenciales y criptomonedas mediante inyecci\u00f3n de prompts<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Desconocido \/ Varios<\/span>\n                <span class=\"mai-note\">Cibercrimen<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.crowdstrike.com\/en-us\/blog\/crowdstrike-2026-global-threat-report-findings\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q1\" data-industry=\"unknown\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global \/ Sin especificar<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--unknown\">Sin especificar<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor norcoreano us\u00f3 herramientas de programaci\u00f3n con IA para generar y refinar componentes de malware de forma iterativa, IA ag\u00e9ntica para un flujo completo de creaci\u00f3n de se\u00f1uelos y LLM liberados para generar c\u00f3digo.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">Herramientas de programaci\u00f3n con IA sin especificar; software LLM liberado<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Desarrollo iterativo de malware y creaci\u00f3n automatizada de se\u00f1uelos<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">Coral Sleet<\/span>\n                <span class=\"mai-note\">Storm-1877<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/03\/06\/ai-as-tradecraft-how-threat-actors-operationalize-ai\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q1\" data-industry=\"education\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                  <span class=\"mai-target__sub\">personas en b\u00fasqueda de empleo<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--education\">Empleo \/ Reclutamiento (intersectorial)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor norcoreano us\u00f3 IA para crear identidades digitales falsas que apoyaban campa\u00f1as de ingenier\u00eda social centradas en ofertas de empleo y procesos de selecci\u00f3n.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">IA sin especificar<\/span>\n                <span class=\"mai-note\">generaci\u00f3n de identidades<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Gener\u00f3 identidades falsas para ingenier\u00eda social con tem\u00e1tica de reclutamiento<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">Sapphire Sleet<\/span>\n                <span class=\"mai-note\">RPDC<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/03\/06\/ai-as-tradecraft-how-threat-actors-operationalize-ai\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q2\" data-industry=\"cross\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--cross\">Intersectorial (v\u00edctimas de phishing como servicio)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Microsoft atribuye la plataforma de phishing como servicio Tycoon2FA a Storm-1747; los se\u00f1uelos refinados con IA alcanzaron una tasa de clic de alrededor del 54 % frente al 12 % del phishing tradicional, con decenas de millones de env\u00edos al mes.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">IA sin especificar<\/span>\n                <span class=\"mai-note\">refinamiento del contenido de los se\u00f1uelos<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Refin\u00f3 a escala el contenido de los se\u00f1uelos de phishing para aumentar la tasa de clic<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">Storm-1747<\/span>\n                <span class=\"mai-note\">operadores de Tycoon2FA<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/04\/02\/threat-actor-abuse-of-ai-accelerates-from-tool-to-cyberattack-surface\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q2\" data-industry=\"tech\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global \/ Sin especificar<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Tecnolog\u00eda \/ Dispositivos IoT embebidos<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">El actor emple\u00f3 prompts de \u00abpersona experta\u00bb, pidiendo a Gemini que actuara como auditor s\u00e9nior de seguridad, para impulsar la investigaci\u00f3n de vulnerabilidades en firmware de routers embebidos en busca de fallos de RCE previos a la autenticaci\u00f3n.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Inducida mediante una persona a investigar vulnerabilidades en firmware<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">UNC2814<\/span>\n                <span class=\"mai-note\">designaci\u00f3n de GTIG<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/ai-vulnerability-exploitation-initial-access\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q2\" data-industry=\"unknown\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global \/ Sin especificar<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--unknown\">Sin especificar<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor estatal norcoreano envi\u00f3 miles de prompts repetitivos para analizar CVE de forma recursiva y validar exploits de prueba de concepto a escala, mientras experimentaba con herramientas de IA ag\u00e9ntica.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">LLM sin especificar<\/span>\n                <span class=\"mai-note\">mediante prompts automatizados a escala<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Automatiz\u00f3 el an\u00e1lisis masivo de CVE y la validaci\u00f3n de exploits<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">APT45<\/span>\n                <span class=\"mai-note\">RPDC<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/ai-vulnerability-exploitation-initial-access\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q2\" data-industry=\"unknown\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global \/ Sin especificar<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--unknown\">Sin especificar (desarrollo de infraestructura)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor vinculado al Estado chino us\u00f3 Gemini para acelerar el desarrollo de una app de gesti\u00f3n de flotas que daba soporte a una red de cajas de retransmisi\u00f3n operativa (ORB) empleada para enrutar tr\u00e1fico malicioso.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Aceler\u00f3 el desarrollo de la infraestructura de gesti\u00f3n de la red ORB<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">APT27<\/span>\n                <span class=\"mai-note\">Emissary Panda, LuckyMouse<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/ai-vulnerability-exploitation-initial-access\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q2\" data-industry=\"tech\" data-ai=\"gemini openai claude\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global \/ Sin especificar<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Tecnolog\u00eda \/ Proveedores de IA<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor vinculado al Estado chino us\u00f3 un script p\u00fablico para registrar y cancelar masivamente cuentas de prueba premium en Gemini, Claude y OpenAI con el fin de obtener acceso anonimizado a los modelos.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini, Claude, OpenAI<\/span>\n                <span class=\"mai-note\">cuentas abusadas<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Abus\u00f3 de los flujos de registro para obtener acceso premium an\u00f3nimo y gratuito<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">UNC6201<\/span>\n                <span class=\"mai-note\">v\u00ednculo con la RPC<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/ai-vulnerability-exploitation-initial-access\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q2\" data-industry=\"gov\" data-ai=\"gemini openai claude\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Asia meridional y sudoriental<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--gov\">Gobierno<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor vinculado al Estado chino cre\u00f3 middleware proxy ofuscado para agrupar y compartir el acceso a cuentas de Gemini, Claude y OpenAI, mientras atacaba a organismos p\u00fablicos del sur y sudeste asi\u00e1tico.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini, Claude, OpenAI<\/span>\n                <span class=\"mai-note\">ocultado tras infraestructura proxy<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Construy\u00f3 infraestructura para un acceso an\u00f3nimo y compartido a los LLM<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">UNC5673<\/span>\n                <span class=\"mai-note\">v\u00ednculo con la RPC, solapa con TEMP.Hex<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/ai-vulnerability-exploitation-initial-access\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q2\" data-industry=\"tech\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Tecnolog\u00eda \/ Administraci\u00f3n de sistemas<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor us\u00f3 un modelo de IA distinto de Gemini para descubrir y armar un d\u00eda cero de elusi\u00f3n de 2FA en una conocida herramienta de administraci\u00f3n de c\u00f3digo abierto: el primer d\u00eda cero desarrollado con IA documentado por GTIG.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">Modelo de IA sin especificar<\/span>\n                <span class=\"mai-note\">confirmado que no era Gemini<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Descubri\u00f3 y ayud\u00f3 a armar una vulnerabilidad de d\u00eda cero<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">cibercrimen, designaci\u00f3n de GTIG<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/ai-vulnerability-exploitation-initial-access\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q2\" data-industry=\"unknown\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Ucrania<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--unknown\">Sin especificar<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor no atribuido con v\u00ednculos rusos distribuy\u00f3 malware (CANFAIL, LONGSTREAM) contra Ucrania que utiliza c\u00f3digo de relleno generado por LLM para ofuscar su funcionalidad maliciosa real.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">LLM sin especificar<\/span>\n                <span class=\"mai-note\">usado para generar c\u00f3digo se\u00f1uelo<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Gener\u00f3 c\u00f3digo se\u00f1uelo o de relleno para ofuscar el malware<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">v\u00ednculo con Rusia, designaci\u00f3n de GTIG<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/ai-vulnerability-exploitation-initial-access\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q2\" data-industry=\"unknown\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                  <span class=\"mai-target__sub\">Usuarios de Android<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--unknown\">Sin especificar \/ Consumo<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Una puerta trasera para Android incorpora un agente aut\u00f3nomo basado en la API de Gemini que navega por la interfaz del dispositivo para robar datos en \u00e9l; se considera experimental y no est\u00e1 atribuida.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">API de Gemini<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Un agente aut\u00f3nomo naveg\u00f3 por la interfaz del dispositivo para robar datos<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">PROMPTSPY, designaci\u00f3n de GTIG\/ESET<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/ai-vulnerability-exploitation-initial-access\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q2\" data-industry=\"tech\" data-ai=\"other\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Jap\u00f3n, Asia oriental<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Tecnolog\u00eda \/ Ciberseguridad<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor presuntamente vinculado al Estado chino despleg\u00f3 frameworks ag\u00e9nticos de seguridad ofensiva (Hexstrike, Strix) contra una tecnol\u00f3gica japonesa y una plataforma de ciberseguridad de Asia oriental.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--other\">Hexstrike, Strix<\/span>\n                <span class=\"mai-note\">frameworks ag\u00e9nticos de seguridad ofensiva<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Ejecut\u00f3 frameworks ag\u00e9nticos para llevar a cabo la intrusi\u00f3n<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">presunto v\u00ednculo con la RPC, designaci\u00f3n de GTIG<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/ai-vulnerability-exploitation-initial-access\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q2\" data-industry=\"unknown\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Sin especificar<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--unknown\">Sin especificar (v\u00edctima de servicios cloud)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Las evidencias de comportamiento (accesos simult\u00e1neos con varias cuentas desde una misma IP y user-agent, ejecuci\u00f3n r\u00e1pida de t\u00e9cnicas en forma de lista de comprobaci\u00f3n) apuntaban a una ejecuci\u00f3n asistida por IA ag\u00e9ntica en una toma de control de AWS de unas 72 horas.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">Sin especificar<\/span>\n                <span class=\"mai-note\">IA ag\u00e9ntica inferida por comportamiento, sin confirmar<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Se sospecha que dirigi\u00f3 tareas de intrusi\u00f3n cloud r\u00e1pidas y en paralelo<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">motivaci\u00f3n econ\u00f3mica, designaci\u00f3n de Sygnia<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.sygnia.co\/threat-reports\/inside-an-ai-assisted-cloud-attack\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q3\" data-industry=\"gov\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Rusia, Kazajist\u00e1n, Brasil<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--gov\">Administraci\u00f3n, sector el\u00e9ctrico<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Una campa\u00f1a de espionaje por spear phishing contra objetivos gubernamentales y del sector el\u00e9ctrico en Rusia, Kazajist\u00e1n y Brasil distribuy\u00f3 BusySnake Stealer mediante un cargador cuyo c\u00f3digo Kaspersky atribuye a un LLM.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">Poco claro<\/span>\n                <span class=\"mai-note\">LLM sospechado por el estilo del c\u00f3digo; sin confirmar<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Presunta generaci\u00f3n del c\u00f3digo fuente del cargador del malware<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">Armored Likho<\/span>\n                <span class=\"mai-note\">Eagle Werewolf<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/securelist.com\/armored-likho-apt-with-busysnake-stealer\/120292\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q3\" data-industry=\"unknown\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global \/ Sin especificar<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--unknown\">Sin especificar<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor sin identificar despleg\u00f3 un script de PowerShell autodeclarado como generado por IA para enumerar entornos de Active Directory, us\u00e1ndolo junto a las herramientas s5cmd y SharpShares.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">IA sin especificar<\/span>\n                <span class=\"mai-note\">script autodeclarado como generado por IA<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Gener\u00f3 el script de PowerShell usado para enumerar Active Directory<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">UnSub, designaci\u00f3n de Huntress<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/thehackernews.com\/2026\/07\/attacker-uses-suspected-ai-generated.html\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q3\" data-industry=\"tech\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global \/ Sin especificar<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Tecnolog\u00eda (usuarios de Langflow e infraestructura de IA)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Primera campa\u00f1a de ransomware totalmente ag\u00e9ntica: un agente LLM explot\u00f3 de forma aut\u00f3noma un fallo de Langflow, recolect\u00f3 credenciales, se movi\u00f3 lateralmente y cifr\u00f3 1.342 configuraciones con m\u00e1s de 600 cargas \u00fatiles.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">Agente LLM sin especificar<\/span>\n                <span class=\"mai-note\">framework ag\u00e9ntico, modelo sin nombrar<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Ejecut\u00f3 todo el ataque de forma aut\u00f3noma de principio a fin<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">JADEPUFFER<\/span>\n                <span class=\"mai-note\">\u00abactor de amenaza ag\u00e9ntico\u00bb<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.sysdig.com\/blog\/jadepuffer-agentic-ransomware-for-automated-database-extortion\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q3\" data-industry=\"tech\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                  <span class=\"mai-target__sub\">Dispositivos IoT<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Tecnolog\u00eda \/ Dispositivos IoT<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Unit 42 detect\u00f3 una botnet de IoT (TuxBot v3) cuyo desarrollador iran\u00ed recurri\u00f3 intensamente a c\u00f3digo generado por LLM para los m\u00f3dulos del bot, el c\u00f3digo del servidor C2 y la adaptaci\u00f3n de un exploit de ADB.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">LLM sin especificar<\/span>\n                <span class=\"mai-note\">comentarios de razonamiento dejados en el c\u00f3digo<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Gener\u00f3 m\u00f3dulos de la botnet, c\u00f3digo de C2 y la adaptaci\u00f3n del exploit<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">desarrollador con v\u00ednculos iran\u00edes, TuxBot v3<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/unit42.paloaltonetworks.com\/tuxbot-v3-evolution-iot-botnet\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q3\" data-industry=\"healthcare\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Estados Unidos<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--healthcare\">Sanidad (cl\u00ednica dental); consumo y criptomonedas<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor rusoparlante us\u00f3 Gemini liberado para alrededor del 90 % de una operaci\u00f3n de fraude (escribir c\u00f3digo de C2, migrar la infraestructura en 6 minutos), comprometiendo una cl\u00ednica dental estadounidense y objetivos con monederos de criptomonedas.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini<\/span>\n                <span class=\"mai-note\">liberado mediante la persona de \u00abpentester autorizado\u00bb<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Dirigi\u00f3 de forma aut\u00f3noma cerca del 90 % de la operaci\u00f3n de fraude<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">bandcampro<\/span>\n                <span class=\"mai-note\">rusoparlante, designaci\u00f3n de Trend Micro<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.theregister.com\/research\/2026\/07\/14\/the-bots-are-alive-jailbroken-gemini-spun-up-new-c2-server-for-russian-fraudster-in-just-6-minutes\/5270131\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q3\" data-industry=\"gov\" data-ai=\"claude other\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Tailandia, Afganist\u00e1n, Taiw\u00e1n<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--gov\">Administraci\u00f3n, tecnolog\u00eda, servicios financieros<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor presuntamente radicado en China ejecut\u00f3 Claude Code y DeepSeek-v4-pro de forma conjunta, comprometiendo sistemas gubernamentales de Tailandia y Afganist\u00e1n, explotando parcialmente empresas taiwanesas y extrayendo credenciales de administraci\u00f3n de servicios financieros.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--claude\">Claude Code, DeepSeek-v4-pro<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Ejecuci\u00f3n ag\u00e9ntica, generaci\u00f3n de scripts de explotaci\u00f3n y estrategia de elusi\u00f3n<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">presunto v\u00ednculo con China, designaci\u00f3n de Hunt.io<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/hunt.io\/blog\/chinese-operators-claude-deepseek-government-intrusion\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q3\" data-industry=\"tech\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>N\/D<\/span>\n                  <span class=\"mai-target__sub\">la propia infraestructura de Hugging Face<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Tecnolog\u00eda (plataforma de IA\/ML)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">La propia respuesta a incidentes de Hugging Face detect\u00f3 en julio de 2026 una intrusi\u00f3n en su infraestructura interna ejecutada por un framework de agentes aut\u00f3nomos, que explot\u00f3 fallos del cargador de conjuntos de datos y registr\u00f3 m\u00e1s de 17.000 acciones del agente.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">Framework de agentes aut\u00f3nomos sin especificar<\/span>\n                <span class=\"mai-note\">LLM subyacente no identificado<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Ejecut\u00f3 de forma aut\u00f3noma toda la intrusi\u00f3n, del reconocimiento al movimiento lateral<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">revelado por la propia v\u00edctima, sin actor identificado<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/huggingface.co\/blog\/security-incident-july-2026\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q3\" data-industry=\"gov\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                  <span class=\"mai-target__sub\">Usuarios de Zimbra: administraci\u00f3n, defensa, energ\u00eda, tecnolog\u00eda, educaci\u00f3n, medios, fuerzas de seguridad y ONG<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--gov\">Administraci\u00f3n, defensa, energ\u00eda, tecnolog\u00eda, educaci\u00f3n, medios, fuerzas de seguridad y ONG<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor estatal ruso hizo phishing a usuarios del webmail Zimbra mediante un fallo XSS de inyecci\u00f3n CSS para recolectar correos, directorios y tokens 2FA; seg\u00fan los informes, la IA ayud\u00f3 a construir su framework de exfiltraci\u00f3n.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">IA sin especificar<\/span>\n                <span class=\"mai-note\">inferido por el aviso, sin artefacto confirmado<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Se estima que ayud\u00f3 a desarrollar el framework de exfiltraci\u00f3n Flowerbed<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">LAUNDRY BEAR<\/span>\n                <span class=\"mai-note\">Void Blizzard, TA488<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.cisa.gov\/news-events\/cybersecurity-advisories\/aa26-204a\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q3\" data-industry=\"cross\" data-ai=\"claude\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                  <span class=\"mai-target__sub\">29 organizaciones<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--cross\">Intersectorial<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Una campa\u00f1a de malvertising abus\u00f3 de un Artifact p\u00fablico de Claude en claude.ai para suplantar al instalador de Claude Desktop y distribuir el malware SectopRAT a 29 organizaciones antes de que Anthropic lo retirara.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--claude\">Artifact de Claude<\/span>\n                <span class=\"mai-note\">Anthropic, abusado como vector de alojamiento y distribuci\u00f3n<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Un Artifact creado por el atacante suplant\u00f3 software oficial como se\u00f1uelo<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">FakeAgent, designaci\u00f3n de Huntress<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.helpnetsecurity.com\/2026\/07\/23\/anthropic-claude-artifacts-download-malware\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2026\" data-quarter=\"Q3\" data-industry=\"cross\" data-ai=\"other\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>B\u00e9lgica, Alemania, Escocia\/RU, Argentina, Italia, Estados Unidos<\/span>\n                  <span class=\"mai-target__sub\">10 organizaciones en total<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--cross\">Intersectorial (productos de higiene, industria, certificaci\u00f3n aeron\u00e1utica, farmac\u00e9utica, inmobiliaria)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Los operadores rusoparlantes del ransomware Aur0ra dijeron repetidamente al agente de IA de Cursor que realizaban una prueba de seguridad leg\u00edtima, y lo usaron para automatizar el escaneo de redes, el acceso por VPN y la explotaci\u00f3n en 10 organizaciones.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--other\">Cursor<\/span>\n                <span class=\"mai-note\">agente de programaci\u00f3n con IA<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Automatiz\u00f3 el reconocimiento, el acceso por VPN y los intentos de explotaci\u00f3n<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">grupo de ransomware Aur0ra<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.esecurityplanet.com\/threats\/news-cursor-ai-hackers-aur0ra-ransomware\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q1\" data-industry=\"cross\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--cross\">Intersectorial (v\u00edctimas de RaaS)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un grupo emergente de ransomware como servicio reivindic\u00f3 m\u00e1s de 85 v\u00edctimas solo en diciembre de 2024; el c\u00f3digo y los scripts de su ransomware mostraban rastros caracter\u00edsticos de comentarios y salidas generadas por LLM.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">Agente de programaci\u00f3n LLM\/IA sin especificar<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Ayud\u00f3 a desarrollar el c\u00f3digo del ransomware e impuls\u00f3 el chatbot de soporte del grupo<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">FunkSec<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/research.checkpoint.com\/2025\/funksec-alleged-top-ransomware-group-powered-by-ai\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q3\" data-industry=\"healthcare\" data-ai=\"claude\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                  <span class=\"mai-target__sub\">m\u00e1s de 17 organizaciones<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--healthcare\">Sanidad, servicios de emergencia, administraci\u00f3n, entidades religiosas<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Us\u00f3 Claude Code como agente aut\u00f3nomo en m\u00e1s de 17 organizaciones para hacer reconocimiento, robar credenciales y penetrar en redes, y despu\u00e9s dimensionar las exigencias de rescate y redactar notas personalizadas para cada v\u00edctima.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--claude\">Claude Code<\/span>\n                <span class=\"mai-note\">Anthropic<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Actu\u00f3 como agente aut\u00f3nomo para la intrusi\u00f3n y la redacci\u00f3n de notas de rescate<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">GTG-2002<\/span>\n                <span class=\"mai-note\">actor de \u00abvibe hacking\u00bb, designaci\u00f3n de Anthropic<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.anthropic.com\/news\/detecting-countering-misuse-aug-2025\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q3\" data-industry=\"cross\" data-ai=\"claude\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                  <span class=\"mai-target__sub\">compradores de foros de la dark web<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--cross\">Intersectorial (kit de RaaS)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor de bajo nivel t\u00e9cnico y dependiente del modelo us\u00f3 Claude para crear y vender un kit de ransomware como servicio (cifrado ChaCha20, anti-EDR y antirrecuperaci\u00f3n) en foros de la dark web por entre 400 y 1.200 d\u00f3lares.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--claude\">Claude<\/span>\n                <span class=\"mai-note\">Anthropic<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Construy\u00f3 el c\u00f3digo y el producto de ransomware que el delincuente vend\u00eda<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">GTG-5004<\/span>\n                <span class=\"mai-note\">desarrollador de RaaS, designaci\u00f3n de Anthropic<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.anthropic.com\/news\/detecting-countering-misuse-aug-2025\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q3\" data-industry=\"finance\" data-ai=\"claude\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--finance\">Servicios financieros (carding y tarjetas robadas)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor no identificado us\u00f3 Claude para construir un servicio de carding (tarjetas de pago robadas), desarrollando integraciones de API avanzadas y mecanismos de resiliencia operativa para la plataforma criminal.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--claude\">Claude<\/span>\n                <span class=\"mai-note\">Anthropic<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Ayud\u00f3 a construir y reforzar el servicio criminal de carding<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">Anthropic: \u00aboperador de carding no identificado\u00bb<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www-cdn.anthropic.com\/b2a76c6f6992465c09a6f2fce282f6c0cea8c200.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q3\" data-industry=\"retail\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Brasil, Am\u00e9rica Latina<\/span>\n                  <span class=\"mai-target__sub\">hispanohablante<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--retail\">Hosteler\u00eda (hoteles)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Las campa\u00f1as del verano de 2025 contra hoteles brasile\u00f1os e hispanohablantes emplearon una parte considerable de c\u00f3digo de infecci\u00f3n y descarga generado por LLM para distribuir el malware VenomRAT (HVNC, infostealer, elusi\u00f3n de UAC).<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">Poco claro<\/span>\n                <span class=\"mai-note\">LLM sospechado por el estilo del c\u00f3digo; sin confirmar<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Presunta generaci\u00f3n del c\u00f3digo de infecci\u00f3n y de descarga<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">RevengeHotels<\/span>\n                <span class=\"mai-note\">TA558<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/securelist.com\/revengehotels-attacks-with-ai-and-venomrat-across-latin-america\/117493\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q3\" data-industry=\"cross\" data-ai=\"other\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                  <span class=\"mai-target__sub\">m\u00e1s de 5.000 organizaciones<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--cross\">Intersectorial (suplantaci\u00f3n bancaria y financiera, cripto y DeFi)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Los ciberdelincuentes abusaron del creador de sitios con IA Lovable para producir en masa p\u00e1ginas de phishing, clones de vaciadores de monederos DeFi y redirectores de malware: decenas de miles de URL maliciosas al mes.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--other\">Lovable<\/span>\n                <span class=\"mai-note\">plataforma de creaci\u00f3n de webs con IA<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Gener\u00f3 autom\u00e1ticamente p\u00e1ginas de phishing e infraestructura de fraude a escala<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Operadores varios o desconocidos<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/cybercriminals-abuse-ai-website-creation-app-phishing\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q4\" data-industry=\"gov\" data-ai=\"other\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Ucrania<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--gov\">Administraci\u00f3n \/ Defensa \/ Militar<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor del GRU ruso despleg\u00f3 contra Ucrania el malware PROMPTSTEAL (LameHug), un extractor de datos que consulta un LLM mediante la API de Hugging Face en tiempo de ejecuci\u00f3n para generar comandos de reconocimiento sobre la marcha.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--other\">Qwen2.5-Coder-32B-Instruct<\/span>\n                <span class=\"mai-note\">mediante la API de Hugging Face<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">El malware consultaba el LLM en directo para generar sus propios comandos de reconocimiento y recolecci\u00f3n<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">Fancy Bear<\/span>\n                <span class=\"mai-note\">APT28, Forest Blizzard<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/threat-actor-usage-of-ai-tools\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q4\" data-industry=\"tech\" data-ai=\"claude\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                  <span class=\"mai-target__sub\">unos 30 objetivos<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Tecnolog\u00eda, servicios financieros, qu\u00edmica, administraci\u00f3n<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor patrocinado por el Estado chino liber\u00f3 Claude Code mediante un juego de rol de \u00abempresa de seguridad defensiva\u00bb para ejecutar de forma aut\u00f3noma intrusiones de espionaje contra unas 30 organizaciones de todo el mundo, con \u00e9xito en algunas de ellas.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--claude\">Claude Code<\/span>\n                <span class=\"mai-note\">Anthropic<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Realiz\u00f3 de forma aut\u00f3noma entre el 80 % y el 90 % del trabajo t\u00e1ctico de intrusi\u00f3n<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">GTG-1002<\/span>\n                <span class=\"mai-note\">patrocinado por el Estado chino, designaci\u00f3n de Anthropic<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.anthropic.com\/news\/disrupting-AI-espionage\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q4\" data-industry=\"unknown\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global \/ Sin especificar<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--unknown\">Sin especificar (desarrollo de herramientas)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor vinculado al Estado chino us\u00f3 Gemini para desarrollar en C++ y Golang varias herramientas, incluido un framework de C2 (\u00abOSSTUN\u00bb), adem\u00e1s de ayuda con la ofuscaci\u00f3n de c\u00f3digo mediante bibliotecas p\u00fablicas.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Ayud\u00f3 a desarrollar herramientas de malware y C2 y a ofuscar el c\u00f3digo<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">APT41<\/span>\n                <span class=\"mai-note\">Wicked Panda<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/threat-actor-usage-of-ai-tools\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q4\" data-industry=\"gov\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                  <span class=\"mai-target__sub\">personal de think tanks suplantado<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--gov\">Administraci\u00f3n \/ Think tanks \/ Academia<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor iran\u00ed vinculado al CGRI us\u00f3 Gemini para elaborar contenido de phishing suplantando a personal de think tanks e intent\u00f3 crear un \u00abagente de procesamiento de datos\u00bb de lenguaje natural a SQL para extraer datos personales.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Gener\u00f3 contenido de phishing y construy\u00f3 un agente de miner\u00eda de datos de lenguaje natural a SQL<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">APT42<\/span>\n                <span class=\"mai-note\">Charming Kitten<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/threat-actor-usage-of-ai-tools\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q4\" data-industry=\"unknown\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global \/ Sin especificar<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--unknown\">Sin especificar (desarrollo de malware)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor iran\u00ed liber\u00f3 Gemini con pretextos falsos de estudiante e investigador para desarrollar malware a medida, incluidos un servidor C2 en Python y web shells.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Ayud\u00f3 a desarrollar el servidor C2 y el malware de tipo web shell<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">TEMP.Zagros<\/span>\n                <span class=\"mai-note\">MuddyWater<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/threat-actor-usage-of-ai-tools\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q4\" data-industry=\"crypto\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                  <span class=\"mai-target__sub\">sector de las criptomonedas<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--crypto\">Criptomonedas \/ Tecnolog\u00eda financiera<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor norcoreano us\u00f3 Gemini para el reconocimiento de monederos de criptomonedas, se\u00f1uelos de phishing multiling\u00fces e intentos de c\u00f3digo de robo; emple\u00f3 un v\u00eddeo deepfake de un falso CEO en Zoom para distribuir el malware BIGMACHO.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini; v\u00eddeo e im\u00e1genes deepfake generados con IA<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Reconocimiento, generaci\u00f3n de se\u00f1uelos y suplantaci\u00f3n con deepfake para distribuir malware<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">UNC1069<\/span>\n                <span class=\"mai-note\">MASAN, CryptoCore<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/threat-actor-usage-of-ai-tools\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q4\" data-industry=\"tech\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global \/ Sin especificar<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Tecnolog\u00eda (dispositivos de borde, navegadores, cadena de suministro)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor norcoreano us\u00f3 Gemini para desarrollar c\u00f3digo, investigar exploits para dispositivos de borde y navegadores modernos y mejorar sus herramientas de ataque.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Ayud\u00f3 en el desarrollo de c\u00f3digo y la investigaci\u00f3n de exploits<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">UNC4899<\/span>\n                <span class=\"mai-note\">PUKCHONG<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/threat-actor-usage-of-ai-tools\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q4\" data-industry=\"unknown\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global \/ Sin especificar<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--unknown\">Sin especificar<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor con presunto v\u00ednculo con China liber\u00f3 Gemini con el pretexto falso de un \u00abcapture the flag\u00bb para crear se\u00f1uelos de phishing, herramientas de exfiltraci\u00f3n y web shells.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Gener\u00f3 phishing, herramientas de exfiltraci\u00f3n y web shells<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">v\u00ednculo con China, pretexto de CTF<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/threat-actor-usage-of-ai-tools\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q4\" data-industry=\"tech\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global \/ Sin especificar<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Tecnolog\u00eda \/ Infraestructura cloud<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor con presunto v\u00ednculo con China us\u00f3 Gemini a lo largo de todo el ciclo de la intrusi\u00f3n (reconocimiento, entrega de la carga \u00fatil, movimiento lateral, C2 y exfiltraci\u00f3n), incluso en entornos de AWS, vSphere y Kubernetes que no conoc\u00eda.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">Gemini<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Asisti\u00f3 en todo el ciclo de la intrusi\u00f3n sobre sistemas cloud<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">v\u00ednculo con China, intrusi\u00f3n cloud<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/threat-actor-usage-of-ai-tools\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q4\" data-industry=\"tech\" data-ai=\"openai\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Taiw\u00e1n, Estados Unidos, global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Semiconductores \/ Academia \/ Entorno gubernamental (grupos pol\u00edticos)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">OpenAI desarticul\u00f3 a actores de habla rusa, coreana y china que usaban ChatGPT para refinar malware y troyanos de acceso remoto, construir sistemas de C2 y elaborar phishing contra el sector taiwan\u00e9s de semiconductores y la academia estadounidense.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--openai\">ChatGPT<\/span>\n                <span class=\"mai-note\">OpenAI<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Refin\u00f3 malware, construy\u00f3 herramientas de C2 y elabor\u00f3 phishing<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Varios o desconocidos<\/span>\n                <span class=\"mai-note\">cl\u00fasteres de habla rusa, coreana y china<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/openai.com\/global-affairs\/disrupting-malicious-uses-of-ai-october-2025\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q4\" data-industry=\"tech\" data-ai=\"other\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                  <span class=\"mai-target__sub\">desarrolladores que usan GitHub y npm<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Tecnolog\u00eda \/ Desarrollo de software<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un malware de robo de credenciales invocaba las propias herramientas de IA de l\u00ednea de comandos instaladas por las v\u00edctimas para buscar m\u00e1s secretos en los sistemas infectados, exfiltrando los datos mediante repositorios p\u00fablicos de GitHub creados por el atacante.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--other\">Herramientas de IA de l\u00ednea de comandos del propio equipo<\/span>\n                <span class=\"mai-note\">las de la v\u00edctima, sin especificar<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Abus\u00f3 de las herramientas de IA de la propia v\u00edctima para buscar secretos<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">QUIETVAULT, designaci\u00f3n de GTIG<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/threat-actor-usage-of-ai-tools\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q4\" data-industry=\"unknown\" data-ai=\"gemini\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Unknown<\/span>\n                  <span class=\"mai-target__sub\">experimental, a\u00fan no desplegado<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--unknown\">Sin especificar (experimental)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un malware experimental en VBScript llama a la API de Gemini en tiempo de ejecuci\u00f3n para reescribir y ofuscar su propio c\u00f3digo \u00abal vuelo\u00bb y se propaga por unidades extra\u00edbles; todav\u00eda no se ha observado desplegado.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--gemini\">API de Gemini<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">El malware la invoca en directo para automodificarse y ofuscar su c\u00f3digo<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">PROMPTFLUX, designaci\u00f3n de GTIG<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/threat-actor-usage-of-ai-tools\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2025\" data-quarter=\"Q4\" data-industry=\"cross\" data-ai=\"other\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--cross\">Intersectorial (v\u00edctimas de RaaS)<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un grupo de ransomware como servicio ofreci\u00f3 a sus afiliados una herramienta de \u00abchat asistido por IA\u00bb que analiza los datos de la empresa v\u00edctima para personalizar y automatizar los mensajes de negociaci\u00f3n de la extorsi\u00f3n.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--other\">Herramienta propia de \u00abchat asistido por IA\u00bb<\/span>\n                <span class=\"mai-note\">LLM sin especificar<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Automatiz\u00f3 y personaliz\u00f3 los mensajes de negociaci\u00f3n de la extorsi\u00f3n<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">Global Group<\/span>\n                <span class=\"mai-note\">tambi\u00e9n El Dorado, Blacklock<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.sentinelone.com\/labs\/llms-ransomware-an-operational-accelerator-not-a-revolution\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q1\" data-industry=\"cross\" data-ai=\"other\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--cross\">Intersectorial<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un grupo cibercriminal vendi\u00f3 una herramienta con IA para estafas de fraude del CEO que analizaba correos comprometidos y alteraba los datos bancarios de las facturas para desviar los pagos.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--other\">Herramienta de IA propia<\/span>\n                <span class=\"mai-note\">sin especificar<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Automatiz\u00f3 la detecci\u00f3n de facturas y la alteraci\u00f3n de datos bancarios para estafas de fraude del CEO<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">GXC Team<\/span>\n                <span class=\"mai-note\">\u00abgoogleXcoder\u00bb<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.resecurity.com\/blog\/article\/cybercriminals-implemented-artificial-intelligence-ai-for-invoice-fraud\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q1\" data-industry=\"unknown\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--unknown\">Varios \/ Sin especificar<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">El NCSC brit\u00e1nico estim\u00f3 que los actores de amenaza, incluidos los grupos de ransomware, ya usan IA para mejorar la eficiencia del reconocimiento, el phishing y la programaci\u00f3n.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">Desconocido \/ Sin especificar<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Aument\u00f3 la eficiencia en tareas de reconocimiento, phishing y programaci\u00f3n<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Varios o desconocidos<\/span>\n                <span class=\"mai-note\">incluidos actores de ransomware<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.ncsc.gov.uk\/report\/impact-of-ai-on-cyber-threat\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q1\" data-industry=\"gov\" data-ai=\"openai\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--gov\">Administraci\u00f3n \/ Academia \/ Think tanks<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor norcoreano us\u00f3 LLM para investigar a expertos y think tanks especializados en Corea del Norte y elaborar contenido de spear phishing suplantando a instituciones acad\u00e9micas y ONG.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--openai\">ChatGPT<\/span>\n                <span class=\"mai-note\">OpenAI<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Reconocimiento de objetivos y generaci\u00f3n del contenido se\u00f1uelo de spear phishing<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">APT43<\/span>\n                <span class=\"mai-note\">Kimsuky, Emerald Sleet<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/02\/14\/staying-ahead-of-threat-actors-in-the-age-of-ai\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q1\" data-industry=\"gov\" data-ai=\"openai\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--gov\">Defensa, mar\u00edtimo, transporte, sanidad, tecnolog\u00eda<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor iran\u00ed vinculado al CGRI us\u00f3 IA como apoyo a la ingenier\u00eda social, para depurar malware en .NET e investigar m\u00e9todos de evasi\u00f3n de detecci\u00f3n.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--openai\">ChatGPT<\/span>\n                <span class=\"mai-note\">OpenAI<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Ayud\u00f3 a depurar malware, en ingenier\u00eda social y en la evasi\u00f3n de detecci\u00f3n<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">Imperial Kitten<\/span>\n                <span class=\"mai-note\">Crimson Sandstorm<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/02\/14\/staying-ahead-of-threat-actors-in-the-age-of-ai\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q1\" data-industry=\"gov\" data-ai=\"openai\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Taiw\u00e1n, Tailandia, Mongolia, Malasia, Francia, Nepal, global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--gov\">Administraci\u00f3n \/ Varios sectores<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor vinculado al Estado chino us\u00f3 LLM para apoyar el desarrollo de herramientas y scripts y generar contenido de ingenier\u00eda social contra varios pa\u00edses.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--openai\">ChatGPT<\/span>\n                <span class=\"mai-note\">OpenAI<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Apoy\u00f3 el desarrollo de herramientas y scripts y la creaci\u00f3n de contenido de ingenier\u00eda social<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">Aquatic Panda<\/span>\n                <span class=\"mai-note\">Charcoal Typhoon<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/02\/14\/staying-ahead-of-threat-actors-in-the-age-of-ai\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q1\" data-industry=\"gov\" data-ai=\"openai\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Estados Unidos<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--gov\">Defensa, administraci\u00f3n, tecnolog\u00eda criptogr\u00e1fica<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un actor vinculado al Estado chino us\u00f3 LLM de forma exploratoria para investigar temas sensibles, personas de alto perfil, geopol\u00edtica y asuntos internos de EE. UU.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--openai\">ChatGPT<\/span>\n                <span class=\"mai-note\">OpenAI<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Reconocimiento exploratorio y recopilaci\u00f3n de informaci\u00f3n sobre temas y personas sensibles<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">Sodium<\/span>\n                <span class=\"mai-note\">Salmon Typhoon<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/02\/14\/staying-ahead-of-threat-actors-in-the-age-of-ai\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q1\" data-industry=\"tech\" data-ai=\"other\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Tecnolog\u00eda \/ Desarrolladores de IA y ML<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Alrededor de 100 modelos de aprendizaje autom\u00e1tico maliciosos subidos a Hugging Face conten\u00edan puertas traseras que daban a los atacantes acceso de shell a las m\u00e1quinas de las v\u00edctimas.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--other\">Modelo de ML malicioso<\/span>\n                <span class=\"mai-note\">PyTorch \/ Hugging Face<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">El propio modelo malicioso sirvi\u00f3 de vector de distribuci\u00f3n del malware<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Desconocido \/ Varios sin identificar<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/jfrog.com\/blog\/data-scientists-targeted-by-malicious-hugging-face-ml-models-with-silent-backdoor\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q1\" data-industry=\"tech\" data-ai=\"other\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Tecnolog\u00eda \/ Desarrolladores de IA y ML<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un modelo de PyTorch malicioso subido a Hugging Face (eliminado despu\u00e9s) conten\u00eda una puerta trasera; la IP de alojamiento apuntaba a una posible implicaci\u00f3n de investigadores.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--other\">Modelo de ML malicioso<\/span>\n                <span class=\"mai-note\">PyTorch \/ Hugging Face<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">El propio modelo malicioso sirvi\u00f3 de vector de distribuci\u00f3n del malware<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">baller423\/goober2<\/span>\n                <span class=\"mai-note\">poco claro, posiblemente investigador<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/jfrog.com\/blog\/data-scientists-targeted-by-malicious-hugging-face-ml-models-with-silent-backdoor\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q1\" data-industry=\"tech\" data-ai=\"other\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--tech\">Tecnolog\u00eda \/ Desarrolladores de IA y ML<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Una segunda cuenta de Hugging Face alojaba la misma puerta trasera que baller423\/goober2 en un repositorio de modelo de nombre similar.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--other\">Modelo de ML malicioso<\/span>\n                <span class=\"mai-note\">PyTorch \/ Hugging Face<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">El propio modelo malicioso sirvi\u00f3 de vector de distribuci\u00f3n del malware<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">star23\/baller13<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/jfrog.com\/blog\/data-scientists-targeted-by-malicious-hugging-face-ml-models-with-silent-backdoor\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q1\" data-industry=\"finance\" data-ai=\"other\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Estados Unidos<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--finance\">Servicios Financieros<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Us\u00f3 PowerShell con apariencia de salida generada por LLM (coincidente con los patrones de c\u00f3digo de Llama 2 70B) para exfiltrar datos de usuarios de Entra ID mediante una puerta trasera.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--other\">Llama 2 70B<\/span>\n                <span class=\"mai-note\">sospechado por el patr\u00f3n del c\u00f3digo<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Gener\u00f3 el script de PowerShell usado para exfiltrar datos de usuarios<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">Scattered Spider<\/span>\n                <span class=\"mai-note\">UNC3944<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/asantecloud.com\/wp-content\/uploads\/2024\/02\/GlobalThreatReport2024_Asante.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q1\" data-industry=\"cross\" data-ai=\"openai\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--cross\">Intersectorial<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Durante un incidente del ransomware LockBit RED, el actor consult\u00f3 ChatGPT junto a buscadores para aprender a moverse por Azure y exfiltrar credenciales.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--openai\">ChatGPT<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Usado como apoyo de aprendizaje para navegar por Azure y localizar credenciales<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">Indrik Spider<\/span>\n                <span class=\"mai-note\">Evil Corp<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/asantecloud.com\/wp-content\/uploads\/2024\/02\/GlobalThreatReport2024_Asante.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q1\" data-industry=\"retail\" data-ai=\"none\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--retail\">Consumidor<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Sitios web falsos de \u00abchat GPT\u00bb afirmaban diagnosticar infecciones del ordenador mediante IA, pero en realidad canalizaban a las v\u00edctimas hacia centros de llamadas fraudulentos.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--none\">Ninguno<\/span>\n                <span class=\"mai-note\">marca de IA falsa o imitadora<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Sin IA real: marca falsa para atraer a las v\u00edctimas a llamadas fraudulentas<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">Kaspersky: \u00abUnsub1\u00bb<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/securelist.com\/spam-phishing-report-2023\/112015\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q1\" data-industry=\"retail\" data-ai=\"none\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--retail\">Consumo \/ Financiero<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un falso \u00abchatbot inteligente\u00bb que suplantaba a Elon Musk promet\u00eda rentabilidades de inversi\u00f3n garantizadas y desaparec\u00eda tras cobrar una \u00abcomisi\u00f3n\u00bb por adelantado.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--none\">Ninguno<\/span>\n                <span class=\"mai-note\">chatbot falso o imitador<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Sin IA real: personaje de chatbot falso para atraer v\u00edctimas a una estafa de inversi\u00f3n<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Unknown<\/span>\n                <span class=\"mai-note\">Kaspersky: \u00abUnsub2\u00bb<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/securelist.com\/spam-phishing-report-2023\/112015\/\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q2\" data-industry=\"cross\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Germany<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--cross\">Varios<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">TA547 envi\u00f3 correos de phishing con tem\u00e1tica de facturas suplantando a la cadena alemana Metro y distribuy\u00f3 el infostealer Rhadamanthys mediante un cargador de PowerShell con un estilo de comentarios t\u00edpico de los LLM.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">Poco claro<\/span>\n                <span class=\"mai-note\">se sospecha de ChatGPT, Gemini o Copilot<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Se sospecha que gener\u00f3 o reescribi\u00f3 el script del cargador de PowerShell<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">TA547<\/span>\n                <span class=\"mai-note\">Scully Spider<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/security-brief-ta547-targets-german-organizations-rhadamanthys-stealer\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q2\" data-industry=\"unknown\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--unknown\">Varios \/ Sin especificar<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Trend Micro observ\u00f3 que los delincuentes liberan cada vez m\u00e1s LLM existentes en lugar de crear otros nuevos, adem\u00e1s de las primeras ofertas comerciales de deepfake como servicio, incluidas herramientas para eludir los controles KYC financieros.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">LLM comerciales liberados, varios y sin especificar<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Liberados como apoyo a malware e ingenier\u00eda social; deepfakes para eludir el KYC<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Varios o desconocidos<\/span>\n                <span class=\"mai-note\">varios vendedores de foros criminales<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.trendmicro.com\/vinfo\/us\/security\/news\/cybercrime-and-digital-threats\/back-to-the-hype-an-update-on-how-cybercriminals-are-using-genai\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q3\" data-industry=\"cross\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><circle cx=\"12\" cy=\"12\" r=\"10\"><\/circle><path d=\"M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z\"><\/path><\/svg><\/span>Global<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--cross\">Varios sectores<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Symantec detect\u00f3 campa\u00f1as de phishing que distribu\u00edan los malware Rhadamanthys, NetSupport, ModiLoader, LokiBot y Dunihi mediante scripts de PowerShell, HTML y JavaScript con rastros caracter\u00edsticos de c\u00f3digo generado por LLM.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">Poco claro<\/span>\n                <span class=\"mai-note\">LLM sospechado; salida al estilo de ChatGPT<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Presunta generaci\u00f3n de los scripts de PowerShell, HTML y JS que distribu\u00edan el malware<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--unknown\">Desconocido \/ Varios sin identificar<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.security.com\/threat-intelligence\/malware-ai-llm\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr data-year=\"2024\" data-quarter=\"Q4\" data-industry=\"telecom\" data-ai=\"unknown\">\n              <td data-label=\"Target \/ Country\">\n                <div class=\"mai-target\">\n                  <span class=\"mai-target__name\"><span class=\"mai-target__ico\"><svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M12 22s7-6.2 7-12a7 7 0 0 0-14 0c0 5.8 7 12 7 12z\"><\/path><circle cx=\"12\" cy=\"10\" r=\"2.5\"><\/circle><\/svg><\/span>Estados Unidos<\/span>\n                  <span class=\"mai-target__sub\">+ operadoras internacionales<\/span>\n                <\/div>\n              <\/td>\n              <td data-label=\"Industry\"><span class=\"mai-pill mai-pill--telecom\">Telecomunicaciones<\/span><\/td>\n              <td data-label=\"Details\"><p class=\"mai-details\">Un grupo vinculado al Estado chino vulner\u00f3 a grandes operadoras estadounidenses (T-Mobile, AT&amp;T, Verizon, Lumen) explotando fallos en routers; los investigadores sospechan que la IA y el aprendizaje autom\u00e1tico facilitaron el espionaje.<\/p><\/td>\n              <td data-label=\"AI system used\">\n                <span class=\"mai-ai mai-ai--unknown\">Desconocido \/ Sin especificar<\/span>\n              <\/td>\n              <td data-label=\"AI's role in the attack\"><p class=\"mai-role\">Se sospecha, sin confirmar, que mejor\u00f3 el acceso a la red y la recopilaci\u00f3n de inteligencia<\/p><\/td>\n              <td data-label=\"Threat actor\">\n                <span class=\"mai-group mai-group--named\">Salt Typhoon<\/span>\n                <span class=\"mai-note\">GhostEmperor, Earth Estries, UNC2286<\/span>\n              <\/td>\n              <td data-label=\"Source\"><a class=\"mai-src\" href=\"https:\/\/www.wsj.com\/politics\/national-security\/t-mobile-hacked-in-massive-chinese-breach-of-telecom-networks-4b2d7f92\" target=\"_blank\" rel=\"noopener noreferrer\">Enlace <svg width=\"1em\" height=\"1em\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\"><path d=\"M14 4h6v6M20 4l-9 9\"><\/path><path d=\"M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5\"><\/path><\/svg><\/a><\/td>\n            <\/tr>\n            <tr class=\"mai-empty\" hidden><td colspan=\"7\">Ning\u00fan incidente coincide con estos filtros.<button type=\"button\" class=\"mai-reset\" id=\"mai-reset\">Borrar filtros<\/button><\/td><\/tr>\n          <\/tbody>\n        <\/table>\n      <\/div>\n    <\/div>\n\n    \n    <div class=\"mai-card mai-method\">\n      <h2 class=\"mai-method__title\">Fuentes del Archivo<\/h2>\n      <p class=\"mai-method__intro\">Cada incidente enlaza con la investigaci\u00f3n p\u00fablica de la que procede, casi siempre informes de inteligencia de amenazas publicados por proveedores de IA, fabricantes de seguridad y organismos p\u00fablicos. Estos son los editores m\u00e1s citados entre las 66 entradas.<\/p>\n      <div class=\"mai-sources\">\n        <span class=\"mai-source-pill\">Google Threat Intelligence<span class=\"mai-source-pill__n\">25<\/span><\/span>\n        <span class=\"mai-source-pill\">Microsoft<span class=\"mai-source-pill__n\">7<\/span><\/span>\n        <span class=\"mai-source-pill\">Kaspersky<span class=\"mai-source-pill__n\">4<\/span><\/span>\n        <span class=\"mai-source-pill\">Anthropic<span class=\"mai-source-pill__n\">4<\/span><\/span>\n        <span class=\"mai-source-pill\">JFrog<span class=\"mai-source-pill__n\">3<\/span><\/span>\n        <span class=\"mai-source-pill\">Proofpoint<span class=\"mai-source-pill__n\">2<\/span><\/span>\n        <span class=\"mai-source-pill\">CrowdStrike<span class=\"mai-source-pill__n\">1<\/span><\/span>\n        <span class=\"mai-source-pill\">Sygnia<span class=\"mai-source-pill__n\">1<\/span><\/span>\n        <span class=\"mai-source-pill\">Sysdig<span class=\"mai-source-pill__n\">1<\/span><\/span>\n        <span class=\"mai-source-pill\">Unit 42<span class=\"mai-source-pill__n\">1<\/span><\/span>\n        <span class=\"mai-source-pill\">Hunt.io<span class=\"mai-source-pill__n\">1<\/span><\/span>\n        <span class=\"mai-source-pill\">CISA<span class=\"mai-source-pill__n\">1<\/span><\/span>\n        <span class=\"mai-source-pill mai-source-pill--more\">7 editores m\u00e1s<span class=\"mai-source-pill__n\">15<\/span><\/span>\n      <\/div>\n      <p class=\"mai-method__note\">El papel de la IA y las atribuciones reflejan lo publicado en el momento de la cita. Las entradas marcadas como sospechadas o poco claras no fueron confirmadas por la fuente original.<\/p>\n    <\/div>\n  <\/div>\n<\/section>\n\n\n\n<section class=\"mai-cta\">\n  <div class=\"mai-cta__inner\">\n    <h2 class=\"mai-cta__title\">Consigue acceso gratuito a SOCRadar ahora.<\/h2>\n    <p class=\"mai-cta__desc\">Descubre c\u00f3mo funciona un sistema de alerta temprana para la ciberseguridad.<\/p>\n    <a href=\"\/es\/start-free\/\" class=\"mai-cta__btn\">Empieza Gratis \u2192<\/a>\n  <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>SOCRadar sigue los principales ciberataques con IA y ag\u00e9nticos observados en todo el mundo, desde malware asistido por IA e ingenier\u00eda social con deepfakes hasta intrusiones totalmente aut\u00f3nomas.<\/p>\n","protected":false},"author":0,"featured_media":0,"parent":3294,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-12982","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/socradar.io\/es\/wp-json\/wp\/v2\/pages\/12982","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/socradar.io\/es\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/socradar.io\/es\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/socradar.io\/es\/wp-json\/wp\/v2\/comments?post=12982"}],"version-history":[{"count":0,"href":"https:\/\/socradar.io\/es\/wp-json\/wp\/v2\/pages\/12982\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/socradar.io\/es\/wp-json\/wp\/v2\/pages\/3294"}],"wp:attachment":[{"href":"https:\/\/socradar.io\/es\/wp-json\/wp\/v2\/media?parent=12982"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}