Exposed infrastructure reveals INC and The Gentlemen affiliates' AI intrusion ecosystem

Researchers uncovered an AI-driven intrusion ecosystem used by affiliates of the INC and The Gentlemen ransomware groups. At its core is Phantom, an "Autonomous Red Team Kill Chain Framework." The suspected Russian-speaking operator handles both intrusion and data extortion.

• INC and The Gentlemen affiliates used AI agents to carry out intrusions
• The ecosystem centers on Phantom, an "autonomous Red Team kill chain"
• Operator assessed as Russian-speaking, combining intrusion and extortion