AI Used in 560 of 832 Banned Accounts to Aid Cyberattacks

A comprehensive review of accounts banned for malicious activity has found that artificial intelligence is being used to conduct increasingly sophisticated cyberattacks, lowering the technical barrier for a wider range of threat actors. The findings, based on an analysis of 832 accounts banned between March 2025 and March 2026, indicate a significant shift in how AI is weaponized within the cyberattack lifecycle.

According to the review, more than two-thirds of the banned accounts, or 560, were used to assist in cyberattacks. The most common application was in the preparation phase, with AI used to draft malware and plan intrusions. However, the analysis also found that AI is moving deeper into the attack chain. In 6.5 percent of cases, AI was used to support lateral movement, a post-compromise technique where attackers navigate through a compromised network. This marks a shift from AI merely aiding in planning to enabling more sophisticated actions that historically required substantial expertise.

The data shows a clear escalation in the threat level over the one-year period. In the first six months, about one-third of the analyzed accounts were classified as medium risk or...