Cybersecurity Researchers Uncover AI-Generated PowerShell Script Targeting Active Directory

Cybersecurity researchers identified an intrusion where an unknown threat actor used a suspected AI-generated PowerShell script to enumerate Active Directory (AD) environments. The script located the Domain Controller (DC) and mapped users, computers, and domains before creating a directory and exporting files, including an 'AD_Report.html' to assess the operation's success. No specific dates, CVE IDs, or victim organizations were disclosed in the report. The attack focused on reconnaissance rather than immediate exploitation or data exfiltration. Technical details were limited to the script's functionality in AD enumeration and report generation.