# How AI is making cyberattacks faster, cheaper and harder to spot

> “Cyberattacks are rising because of AI” is half true. AI does not invent new kinds of attack so much as remove the cost and delay from old ones: writing the convincing email, finding the exposed system, trying the next step. Here is the evidence that holds up, the numbers to distrust, and why speed is the part that matters.

Updated 2026-11-03 · Payaries · https://www.payaries.com/blog/how-ai-is-making-cyberattacks-faster-and-cheaper

## What AI actually changes

> **Written 3 November 2026.** Statistics here come from the vendors' own reports, which measure their own telemetry and customers. They show direction, not a census of all attacks. Payaries is a technology platform, not a security adviser. This article reports public information and is not legal or security-consulting advice. Facts in fast-moving stories change — read the primary sources linked below.

- **Cost of persuasion falls.** A fluent phishing message in any language, tailored to a target's job, no longer needs a skilled writer. Voice and video can be cloned too: see [deepfake fraud](https://www.payaries.com/blog/deepfake-fraud-seeing-is-no-longer-believing).
- **Cost of reconnaissance falls.** Finding which companies run a vulnerable product, reading its documentation and drafting a working attack against it is the kind of grind AI tools speed up.
- **Speed rises.** Once inside, attackers move to other systems faster. CrowdStrike's 2026 Global Threat Report, published 24 February 2026, puts the average time from first access to moving sideways at 29 minutes, with the fastest observed at 27 seconds (CrowdStrike's own data on 2025 activity).
- **Fewer fingerprints.** The same report says 82% of 2025 detections were malware-free, meaning attackers used stolen logins and legitimate tools rather than code a scanner can flag.

## The numbers: what to trust

CrowdStrike reports an **89% year-on-year increase in operations by AI-enabled adversaries** in 2025. That is the company's measurement of its tracked adversaries (it follows 281), not of every attacker. Be wary of the larger numbers that circulate online (phishing “up 1,265%”, “82% of phishing emails are AI-written”): the ones we found trace to aggregator blogs rather than a primary study, so we do not repeat them. A good rule: if a statistic has no named study, sample and date, it is not evidence.

## The first disclosed AI-run espionage campaign

In November 2025 Anthropic published a report on a campaign it attributed to a Chinese state-sponsored group, tracked as GTG-1002, that used its Claude Code tool to attack about 30 organisations including technology firms, financial institutions, chemical manufacturers and government agencies. Anthropic said the AI performed 80–90% of the tactical work, with humans stepping in at a handful of decision points, and that the attackers succeeded in a small number of cases. The Register reported the same.

It was disputed. Critics noted that the report published no indicators of compromise, so defenders could not check whether they were targets, and that the model sometimes overstated what it had achieved. Treat it as a credible, company-reported early example of attackers wiring an AI agent into the attack chain, not as proof of how widespread it is. The same idea underlies [agentic AI](https://www.payaries.com/blog/what-is-agentic-ai) in general: software that plans and acts through tools. It is as useful to an attacker as to anyone else.

## AI works for defenders too

The same speed that helps attackers helps those who patch, triage alerts and read logs. The practical risk is the gap: attackers can adopt AI immediately; most organisations take months to patch or review a device. That gap is exactly the one the [supermarket fridge attacks](https://www.payaries.com/blog/supermarket-fridge-cyberattacks-europe-2026) exposed. Belgium's Centre for Cybersecurity said after them that “all IT systems are potentially vulnerable, and AI can now be used to successfully exploit these weaknesses”. The response is dull and effective: shrink the time between a flaw being known and being closed, and remove what does not need to be on the internet.

Teams building their own AI agents should apply the same logic to their own tools: least-privilege credentials and a human sign-off for irreversible actions, as covered in [AI agents and Payaries](https://www.payaries.com/ai-agents).

## Sources

- [2026 CrowdStrike Global Threat Report: AI accelerates adversaries and reshapes the attack surface — CrowdStrike](https://crowdstrike.com/en-us/press-releases/2026-crowdstrike-global-threat-report)
- [Chinese spies told Claude to break into about 30 critical orgs. Some attacks succeeded — The Register (13 Nov 2025)](https://www.theregister.com/2025/11/13/chinese_spies_claude_attacks/)
- [Anthropic uncovers first large scale AI-orchestrated cyberattack targeting 30 organizations — The Decoder](https://the-decoder.com/anthropic-uncovers-first-large-scale-ai-orchestrated-cyberattack-targeting-30-organizations/)
- [New cyberattack on supermarket fridges sweeps across Europe — CNBC](https://www.cnbc.com/2026/11/02/cyberattack-on-fridges-hits-supermarkets-across-europe.html)

## Questions

**Are cyberattacks increasing because of AI?**
Vendors report AI-enabled activity rising sharply (CrowdStrike: +89% in 2025 among the adversaries it tracks) and attacks moving faster, but exact totals depend on what each company measures. AI mostly makes existing attacks cheaper and quicker rather than creating new categories.

**What was the Anthropic GTG-1002 report?**
In November 2025 Anthropic disclosed a campaign by a suspected Chinese state-sponsored group that used Claude Code to attack about 30 organisations, with AI doing most of the tactical work by Anthropic's account. Some security researchers questioned the 80–90% figure and the lack of published indicators.

**Can AI find security flaws automatically?**
AI tools can speed up finding and exploiting known weaknesses, which is why officials such as Belgium's Centre for Cybersecurity warn that exposed systems will be found sooner. The defender's countermeasure is to patch faster and remove unnecessary exposure.

## Try it

Run a real invoice before you commit: [Payaries — www.payaries.com](https://www.payaries.com/signup). Payaries is a multi-chain crypto payment gateway — https://www.payaries.com

## Keep reading

- https://www.payaries.com/blog/what-is-agentic-ai — What is agentic AI? A plain-English guide
- https://www.payaries.com/ai-agents — Build a crypto payment integration with an AI agent, safely
- https://www.payaries.com/blog/deepfake-fraud-seeing-is-no-longer-believing — Deepfake fraud: what happens when a video call can be faked
- https://www.payaries.com/blog/supermarket-fridge-cyberattacks-europe-2026 — Someone is hacking supermarket fridges: what we know about the attacks across Europe
- https://www.payaries.com/blog/big-tech-ai-regulation-demands — What Big Tech actually wants from AI regulation: one rulebook, not none
- https://www.payaries.com/blog/how-to-defend-against-cyberattacks-what-works — How to defend against cyberattacks: the checklist that matches how attacks actually happen
- https://www.payaries.com/blog/why-everything-connected-gets-hacked — Why everything with a network cable ends up hacked: IoT and OT explained