Hackers Weaponize AI and Gemini in Cyberattacks, Breach France's FICOBA Database

Generative AI is lowering the barrier to cyberattacks. Hackers can use DeepSeek, Claude and the open-source CyberStrikeAI platform to automatically scan and compromise Fortinet firewalls at corporate branch offices. PromptSpy, an Android spyware strain, also integrates Google Gemini to evade detection, creating cascading risks for credentials, backups and financial data.

The related attacks date back to last December. Cybersecurity alerts issued on February 23 and March 4 said more than 600 misconfigured Fortinet firewalls across 55 countries had been compromised, with attackers stealing service-account credentials and network configurations. France's national bank-account database, FICOBA, was also accessed using stolen credentials, potentially exposing information on 1.2 million accounts.