GoKawiilBitdefender ties 3AM ransomware hit on UK schools to possible AI-driven automation
Bitdefender reported that a 3AM ransomware affiliate breached a UK school network between September 10 and 19, reaching nearly 50 machines and encrypting about 37 of them. The attackers stole credentials from Veeam backup servers and a Chrome database, deployed Mimikatz and LSASS-dumping tools, created rogue domain admin accounts, linked three Active Directory domains, and disabled security tools before deploying the encryptor.