INC and The Gentlemen ransomware affiliates' exposed AI-driven 'Phantom' intrusion framework tied to 62 victim organizations
SOCRadar researchers found an exposed open directory on 45.227.254.43 (late September 2026, per gbhackers.com) that revealed an AI-assisted intrusion ecosystem run by affiliates of the INC Ransom and The Gentlemen ransomware groups. It is built around an "Autonomous Red Team Kill Chain Framework" called Phantom. Operators used OpenCode wi…