3AM Ransomware Used Human-AI Hybrid Tactics in UK School Estate Compro
The incident, which took place from September 10 to 19, 2026, resulted in the attackers’ encrypting 37 machines and building domain trust in the compromised estate to reach other schools.
The incident, which took place from September 10 to 19, 2026, resulted in the attackers’ encrypting 37 machines and building domain trust in the compromised estate to reach other schools.
Notably, the investigation revealed that parts of the post-compromise techniques were undertaken by a human operator at the keyboard, while other parts behaved like an AI agent.
Bitdefender described the attack as The researchers continued: What this attack does show is that the hybrid approach works, and we assess that it makes economic sense for attackers, with a person setting the goals and an [AI] model handling the mechanical work.
3AM is a ransomware-as-a-service (RaaS) operation, whose Rust-based encryptor was first observed in February 2023.
The next nine retries followed a similar pattern of the delay before the next command being issued taking between 40 to 101 seconds, whatever the size of the change, while moving on to a new task to minutes.
On September 19, the attacker joined three separate Active Directory domains with two-way trusts and pushed the backdoor account’s access across the estate within an about three-hour window.
From September 12-13, the threat actor tested connections to other hosts from a machine where SQL Server was the parent process, and these include running credential dumping tool Mimikatz and creating two backdoor domain-administrator accounts by separate routes.
We can expect hybrid attacks like this one to become more common in 2027. The research blog , published on November 3, attributed the attack to a 3AM ransomware affiliate .
The researchers were not able to determine how the attacker gained initial access to the school estate.
The first recorded activity started on September 10, when the attackers’ accessed credentials stored the estate’s backup infrastructure, before decrypting them with the Windows Data Protection API.
They sent a sequence of commands to the target’s Windows Management Instrumentation (WMI) service, authenticating with stolen administrator credentials.
The researchers said this part of the attack was the clearest example of the hybrid human-AI approach being deployed.
Bitdefender said the hybrid human-AI model suits this work, involving repetitive configuration where the fix comes from a human reading the error.
Bitdefender offered the following recommendations for defenders to protect against future attacks that follow a similar playbook:
What happened
The incident, which took place from September 10 to 19, 2026, resulted in the attackers’ encrypting 37 machines and building domain trust in the compromised estate to reach other schools.
Notably, the investigation revealed that parts of the post-compromise techniques were undertaken by a human operator at the keyboard, while other parts behaved like an AI agent.
Bitdefender described the attack as The researchers continued: What this attack does show is that the hybrid approach works, and we assess that it makes economic sense for attackers, with a person setting the goals and an [AI] model handling the mechanical work.
What changed
3AM is a ransomware-as-a-service (RaaS) operation, whose Rust-based encryptor was first observed in February 2023.
The next nine retries followed a similar pattern of the delay before the next command being issued taking between 40 to 101 seconds, whatever the size of the change, while moving on to a new task to minutes.
On September 19, the attacker joined three separate Active Directory domains with two-way trusts and pushed the backdoor account’s access across the estate within an about three-hour window.
Who is affected
From September 12-13, the threat actor tested connections to other hosts from a machine where SQL Server was the parent process, and these include running credential dumping tool Mimikatz and creating two backdoor domain-administrator accounts by separate routes.
Why it matters
We can expect hybrid attacks like this one to become more common in 2027. The research blog , published on November 3, attributed the attack to a 3AM ransomware affiliate .
The researchers were not able to determine how the attacker gained initial access to the school estate.
Technical details
The first recorded activity started on September 10, when the attackers’ accessed credentials stored the estate’s backup infrastructure, before decrypting them with the Windows Data Protection API.
They sent a sequence of commands to the target’s Windows Management Instrumentation (WMI) service, authenticating with stolen administrator credentials.
Response
The researchers said this part of the attack was the clearest example of the hybrid human-AI approach being deployed.
Bitdefender said the hybrid human-AI model suits this work, involving repetitive configuration where the fix comes from a human reading the error.
What security teams should do
Bitdefender offered the following recommendations for defenders to protect against future attacks that follow a similar playbook:
Attribution
Infosecurity Magazine: The incident, which took place from September 10 to 19, 2026, resulted in the attackers’ encrypting 37 machines and building domain trust in the compromised estate to reach other schools.
What to watch next
Watch for additional victim details, indicators of compromise and follow-on exploitation reports.
Watch for revised vendor guidance, fixed versions and mitigation updates.