AI Accelerates Cybercriminal Operations, Ex‑Hacker Warns

Artificial intelligence is shortening the window between discovery and exploitation for cybercriminals, a former threat actor told security journalists, highlighting a new risk vector that could outpace current defenses.

Brett Johnson, who once operated on the illegal side of the internet before turning to security consulting, described how AI tools now automate many steps that previously required weeks or months of manual work. He said the speed‑up is not just incremental; it reshapes the entire attack lifecycle, giving malicious actors a decisive time advantage.

According to Johnson, AI can perform rapid reconnaissance, scanning networks and identifying vulnerable assets in a fraction of the time traditional tools need. The same technology can also draft convincing phishing emails, generate malicious code snippets, and even adapt payloads to bypass common security controls without human intervention.

The former hacker pointed to three areas where AI delivers the greatest payoff for attackers: social engineering, vulnerability discovery, and code obfuscation. In social engineering, large‑language models can produce personalized messages that mimic a target’s writing style, increasing the likelihood of successful deception. For vulnerability discovery, machine‑learning models can sift through massive codebases to flag exploitable flaws faster than manual analysis. Finally, AI‑driven obfuscation tools can rewrite malware signatures, complicating detection by traditional antivirus solutions.

Security teams are feeling the pressure. Faster attack preparation means shorter dwell times for defenders, reducing the opportunity to detect and contain intrusions before damage occurs. Johnson warned that the volume of low‑cost, AI‑generated attacks could overwhelm security operations centers, forcing organizations to prioritize which alerts to investigate.

Industry responses are already emerging. Vendors are integrating AI into threat‑intelligence platforms to anticipate attacker moves, while some firms are developing counter‑AI tools that can identify synthetic content and automate response actions. Nevertheless, Johnson cautioned that defensive AI must keep pace with the offensive side, or the balance will tip further toward attackers.

Looking ahead, the accessibility of open‑source AI models suggests that even less sophisticated actors will be able to leverage these capabilities. As the technology matures, the line between hobbyist hackers and organized crime groups may blur, expanding the pool of potential threats.

Johnson concluded that organizations should treat AI‑enhanced attacks as a strategic priority, investing in faster patch cycles, continuous monitoring, and staff training to recognize AI‑crafted phishing attempts. Without a proactive stance, the time advantage granted by artificial intelligence could translate into a significant increase in successful cyber intrusions.