Evidence · DiggingBeagle record
SOCRadar n0n ransomware AI-assisted tooling investigation
First-party investigation of attacker-workspace artifacts, scripts, model access and separate victim or demand assertions.
- Source role
- primary disclosure
Evidence record
First-party investigation of attacker-workspace artifacts, scripts, model access and separate victim or demand assertions.
Claim-level citations (2)
- supportsn0n attacker workspace exposed human-directed AI-assisted ransomware development: SOCRadar describes an attacker workspace containing model-assisted development traces and ransomware utilities, but victim-portal listings and ransom demands in that investigation are not verified receipts of payment.
SOCRadar: n0n workspace inventory, model gateway charges and separate demand/victim claims
- supportsn0n attacker workspace exposed human-directed AI-assisted ransomware development: SOCRadar reports recovering an n0n operator workspace containing many scripts, C++ encryptors and records of model-assisted tool development. The recovered material belongs to a criminal investigation and includes claims about victims and demands whose exact outcomes were not independently reconciled. The archive supports substantial human-directed use of AI tooling for ransomware operations and script iteration, not an independently acting model.
SOCRadar: n0n workspace inventory, model gateway charges and separate demand/victim claims