INC and The Gentlemen Ransomware Affiliates Expose 8,257 AI Messages

SOCRadar has found seven exposed servers linked to INC and The Gentlemen ransomware affiliates, holding AI chats, stolen credentials and 46 encryptor builds.

Cybersecurity researchers at SOCRadar recently discovered seven exposed servers linked to INC Ransomware and The Gentlemen ransomware affiliates, finding AI session logs, stolen credentials and ransomware tools among the exposed data.

According to the company’s report, published on October 20, the SOCRadar Threat Research Unit (STRU) recovered 8,257 AI messages across 133 OpenCode sessions, along with 46 custom INC encryptor builds prepared for six victims.

LearnAI Tools

The records also indicated more than $23,920 in AI API spending, and the use of commercial models by the operators, including Claude Opus 4.6 and Kimi K3.

AI-Assisted Intrusions Remained Under Human Control

The operators used OpenCode, an AI coding interface, alongside persistent knowledge bases to plan reconnaissance, generate commands, analyze stolen credentials and draft reports.

LearnAI Tools

Discover...

Copyright of this story solely belongs to hackread.com. To see the full text click HERE