When Ransomware Gets an AI Co-Pilot: Inside the 3AM School Estate Attack
In November 2026, a 3AM ransomware affiliate launched a sophisticated attack against a UK school estate, compromising an initial institution before leveraging Active Directory domain trusts to propagate across multiple schools. Attackers stole backup credentials, created rogue domain-admin accounts, and deployed living-off-the-land techniques using native Windows tools including PowerShell and WMI. Bitdefender's analysis revealed evidence of an agentic AI loop handling repetitive command generation and troubleshooting—such as numbered script revisions, self-labeled output, and sub-40-second retry cycles—while a human operator directed high-level decisions, representing a hybrid human-AI attack model with significant operational scale. This incident marks a notable evolution in ransomware tradecraft: rather than replacing human operators, AI appears to function as a force multiplier, automating the tedious retry and reconnaissance loops that previously required manual effort. As agentic AI tools become more accessible to financially motivated threat actors, defenders in education and other under-resourced sectors face an asymmetric threat that demands prevention-first, repetition-aware detection strategies.
Kill Chain
