A ransomware operator known as n0n targeted 23 organizations across 14 countries, using stolen credentials and AI-assisted tools — spending over $7,000 on AI services — to steal, encrypt, and delete data, but never exploited a single software vulnerability. Despite its aggressive tactics, the group critically undermined itself by leaving its own server publicly exposed, revealing attack scripts, ransomware source code, hardcoded encryption keys, and detailed records of its operations. The incident highlights both the growing role of AI in cybercrime and the fact that even sophisticated threat actors can make elementary security mistakes.
