Wray Warns AI Fuels Cybercrime, Touts FISA 702
FBI Director Christopher Wray warned AI is being weaponized by cybercriminals and defended Section 702 FISA authorities as vital to combating Chinese, Russian, and ransomware threats.
Sourcefbi.gov — open the original
What to check
- Applies to
- Whether this concerns you is not assessed; the names the report mentions are listed below.
In a keynote at the FBI Atlanta Cyber Threat Summit, Director Christopher Wray outlined the Bureau's evolving view of artificial intelligence as both an investigative tool and an emerging criminal enabler. He cited a case of a darknet actor using generative AI to create malware and teach others to replicate it, warning that AI will make threat actors' capabilities more powerful, scalable, and accessible over time. He singled out China as uniquely positioned to combine AI with previously stolen U.S. data to enhance its cyber operations.
Wray used the speech to advocate for reauthorization of FISA Section 702, crediting it with powering over half of the FBI's cyber-related data collection and 97% of raw technical reporting on cyber actors in early 2023. He credited 702 authorities with helping identify the actor behind the 2021 Colonial Pipeline ransomware attack, aiding recovery of ransom funds, assisting a nonprofit victimized by Iranian ransomware actors, and disrupting a Chinese attempt to compromise a U.S. transportation hub.
The speech also addressed nation-state threats, noting Russian reconnaissance of the U.S. energy sector amid the Ukraine war and blurring lines between state-sponsored and criminal hacking. Wray highlighted the FBI's 2022 disruption of the Hive ransomware group as an example of successful public-private collaboration, noting the Bureau covertly distributed decryption keys to over 1,300 victims before seizing Hive's infrastructure with European partners. He closed by stressing that the FBI is currently tracking over 100 active ransomware variants targeting hospitals, emergency services, energy, and government sectors.
Mentioned in this report
Source reporting: https://www.fbi.gov/news/stories/fbi-director-lays-out-bureau-s-stance-on-artificial-intelligence-at-cyber-threat-summit
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the actors and malware it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,445 reports from 149 sources, 666 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs