AIThe Hacker Newsabout 2 hours ago
Aurora Ransomware Uses Cursor AI Against 10 Targets
1 min read
Aurora ransomware operators used Cursor, an AI coding assistant, to plan and execute attacks against 10 targets between April and May 2026. CloudSEK and Gambit Security found exposed infrastructure revealing the Russian-speaking group's toolkit, including Windows and Linux encryptors built from a single Zig codebase. Affiliates receive 54% to 79% of ransoms.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
