AI-Assisted Attacks Still Leave a Behavioral Trace
Darktrace, Wednesday, September 30th, 2026
Darktrace shows how behavioral analysis caught two AI-assisted campaigns through WebDAV transfers, beaconing and C2 traffic.
Darktrace analysts describe behavioral indicators tied to two campaigns linked to AI-assisted threat activity.
Observed activity included suspicious WebDAV file transfers, disguised executable downloads, beaconing to rare infrastructure, unusual process execution and communications with command-and-control servers linked to active intrusion campaigns.
The post argues that even as attackers use AI to accelerate operations, their actions still produce anomalies that behavioral detection can surface.