New Delhi: Taking the center stage during a sponsor presentation at the FutureCrime Summit 2026, cybersecurity firm Resecurity delivered an analysis demonstrating how artificial intelligence and advanced threat intelligence platforms are exposing cybercriminals, dark web marketplaces, and state-sponsored data leaks.
AI Cybercrime Scaling and Threat Vector Evolution
The presentation opened with an overview of how AI has escalated cybercrime into a multi-trillion-dollar global enterprise. Resecurity detailed the evolution of threat vectors—from traditional human-driven operations to AI-assisted attacks using voice cloning, deepfakes, automated phishing, and jailbroken language models like WormGPT, FraudGPT, and DarkGPT. Looking ahead, the firm warned of autonomous AI agents capable of performing reconnaissance, exploitation, and post-exploitation with minimal human oversight.
The transition from human-conducted intrusions to fully autonomous AI attack pipelines represents a major escalation in enterprise threat exposure. By deploying specialized, jailbroken language models and self-directing agents, adversary groups can conduct continuous vulnerability discovery and social engineering at scale, bypassing traditional signature-based detection mechanisms.
Threat Actor Mapping and Digital Footprint Graphing
To illustrate these capabilities in real-world investigations, Resecurity demonstrated its threat actor mapping tools, presenting relationship graphs that trace digital footprints across the web. Case studies featured investigations into prominent threat actors, such as “mosad” and “DarkCata,” connecting dark web identities across forums like Badoo and BreachForums directly to social media handles on X and LinkedIn, as well as specific IP addresses and email domains. Another highlighted actor, “thannara123,” was identified as an India-based hacktivist active on developer forums like go4expert.com.
The operational strategy under review relied on deploying multi-node graph analytics to correlate fragmented online activities. Linking anonymous dark web forum handles to registered clear web identities, developer forums, and static networking infrastructure enables investigators to de-anonymize threat actors and establish definitive criminal attribution.
Dark Web Monitoring, Geopolitical Leaks, and Intelligence-Led Defense
The company also demonstrated its deep web monitoring capabilities, showcasing how its platform tracks confidential data leaks and geopolitical threat operations in real time. Specific examples included a BreachForum post offering 1.7GB of classified military technology design data from India’s Defense Research and Development Organization (DRDO) for $10,000 USD, document leaks associated with Pakistan’s National Aerospace Science and Technology Park (NASTP), and open-source intelligence tracking related to the NEET-UG 2026 protests.
Resecurity concluded the session by emphasizing that countering AI-driven threat actors requires a transition from reactive defense to intelligence-led security, leveraging continuous dark web monitoring and graph analytics to disrupt adversary networks before attacks manifest.
