A n0n ransomware operator tried to break into 23 organizations across 14 countries, but couldn't secure its own front door, leaving its server exposed with all of its methods on view.

The criminals used a mix of new (AI) and old (stolen credentials) tooling during their data-theft spree, and in some cases not only stole and encrypted files, but also deleted data and backups, eliminating victims’ ability to recover their information.

And despite the fear and hype around the breachpocalypse , with AI finding and developing exploits for critical vulnerabilities affecting most organizations across the globe , these crooks did not exploit a single bug to gain entry into any of their victims’ IT environments.

“In every documented compromise in this investigation, access relied on weak or stolen credentials,” said Ensar Seker, chief information security officer of threat intelligence firm SOCRadar.

“What stands out is the combination of AI-assisted development and very conventional entry points,” Seker told The…