Low-Skilled Cybercriminals Use AI to Perform "Vibe Extortion" Attacks

Unit 42’s report outlines how generative AI and LLMs are being adopted by cybercriminals as a force multiplier—illustrated by a ‘vibe extortion’ case where an intoxicated attacker read an AI-crafted extortion script—enabling faster vulnerability scanning, parallelized targeting, automated ransomware and extortion tasks, hyper-personalized social engineering, synthetic identity/deepfake use, and even AI-assisted malware development; the report concludes with recommendations to automate patching and containment, improve behavioral and intent-based defenses, and protect AI model telemetry and prompt visibility.