2025 CrowdStrike Threat Hunting Report: Adversaries weaponise and target AI at scale

CrowdStrike released the 2025 Threat Hunting Report, highlighting a new phase in modern cyberattacks: adversaries are weaponising GenAI to scale operations and accelerate attacks – and increasingly targeting the autonomous AI agents reshaping enterprise operations. The report reveals how threat actors are targeting tools used to build AI agents – gaining access, stealing credentials, and deploying malware – a clear sign that autonomous systems and machine identities have become a core part of the enterprise attack surface.

CrowdStrike Threat Hunting Report highlights
Based on frontline intelligence from CrowdStrike’s elite threat hunters and intelligence analysts tracking more than 265 named adversaries, the report reveals:

• Adversaries weaponise AI at scale: DPRK-nexus adversary FAMOUS CHOLLIMA used GenAI to automate every phase of its insider attack program. From building fake resumes and conducting deepfake interviews to completing technical tasks under false identities – AI-powered adversary tradecraft is transforming traditional insider threats into scalable, persistent ...