OTX Threat: INC and The Gentlemen Ransomware: Exposed AI Infrastructure

Threat researchers discovered an AI-driven intrusion ecosystem operated by affiliates of INC Ransomware and The Gentlemen Ransomware groups through seven exposed command-and-control servers. The operators integrated commercial AI models via OpenCode and OpenRouter, logging over 8,000 messages across 133 sessions with recorded spending exceeding $23,000. They exploited edge devices at scale includi CVEs: CVE-2020-1472, CVE-2021-1675, CVE-2021-42278, CVE-2023-27532, CVE-2024-49112 Sectors: Manufac