VORANT. Threat Intelligence Sign in Get the full feed

Wray Warns AI Fuels Cybercrime, Touts FISA 702

low threat energytransportationhealthcaregovernment-national

FBI Director Christopher Wray warned AI is being weaponized by cybercriminals and defended Section 702 FISA authorities as vital to combating Chinese, Russian, and ransomware threats.

In a keynote at the FBI Atlanta Cyber Threat Summit, Director Christopher Wray outlined the Bureau's evolving view of artificial intelligence as both an investigative tool and an emerging criminal enabler. He cited a case of a darknet actor using generative AI to create malware and teach others to replicate it, warning that AI will make threat actors' capabilities more powerful, scalable, and accessible over time. He singled out China as uniquely positioned to combine AI with previously stolen U.S. data to enhance its cyber operations.

Wray used the speech to advocate for reauthorization of FISA Section 702, crediting it with powering over half of the FBI's cyber-related data collection and 97% of raw technical reporting on cyber actors in early 2023. He credited 702 authorities with helping identify the actor behind the 2021 Colonial Pipeline ransomware attack, aiding recovery of ransom funds, assisting a nonprofit victimized by Iranian ransomware actors, and disrupting a Chinese attempt to compromise a U.S. transportation hub.

The speech also addressed nation-state threats, noting Russian reconnaissance of the U.S. energy sector amid the Ukraine war and blurring lines between state-sponsored and criminal hacking. Wray highlighted the FBI's 2022 disruption of the Hive ransomware group as an example of successful public-private collaboration, noting the Bureau covertly distributed decryption keys to over 1,300 victims before seizing Hive's infrastructure with European partners. He closed by stressing that the FBI is currently tracking over 100 active ransomware variants targeting hospitals, emergency services, energy, and government sectors.

Mentioned in this report

Threat actors China (state-sponsored)HiveRussia (state-sponsored)
Malware Hive

Source reporting: https://www.fbi.gov/news/stories/fbi-director-lays-out-bureau-s-stance-on-artificial-intelligence-at-cyber-threat-summit

This is the public brief

Subscribers see the full picture: extracted IOCs, ready-to-deploy detections (Sigma, Splunk, KQL, Elastic, YARA, Suricata), the entity graph, TAXII 2.1 feed and real-time alerts matched to your sectors.

Start free