Bitdefender finds AI-assisted 3AM ransomware attack on UK school network
Bitdefender published research describing a 3AM ransomware affiliate attack on a UK school estate in which attackers stole backup credentials, created rogue domain-admin accounts, linked separate Active Directory domains, and spread across schools before deploying ransomware. Bitdefender says an AI system appeared to generate repetitive commands and troubleshoot issues while a human operator retained control of high-level decisions, using standard Windows tools like PowerShell and WMI throughout.