Reflecting on AI in 2025: Faster Attacks, Same Old Tradecraft

Executive summary: This Huntress report documents several incidents in which adversaries used AI-assisted tooling to produce commodity attack artifacts—PowerShell credential dumpers, attempted Veeam credential theft, browser credential-harvesting scripts (one successful), and a malicious Chrome extension RAT beaconing to 172.86.105.237:5000. The report includes file and hash IOCs, mapped ATT&CK techniques (credential dumping, browser credential theft, PowerShell execution, lateral movement), detection guidance, and recommendations to prioritize telemetry, MFA, segmentation, and script logging.