According to PANews, Microsoft has initiated a lawsuit to combat cybercrime involving the misuse of generative artificial intelligence technology. The legal action, filed in the Eastern District of Virginia, targets a foreign threat group accused of bypassing AI service security measures to create harmful and illegal content.
Microsoft's Digital Crimes Unit (DCU) highlighted that the defendants developed tools using stolen customer credentials to gain unauthorized access to generative AI services. These modified AI capabilities were then resold with instructions for malicious use. The lawsuit claims that the cybercriminals' activities violate U.S. law and Microsoft's Acceptable Use Policy.
As part of the investigation, Microsoft has seized the core website of the operation, which is expected to help identify the perpetrators, dismantle their infrastructure, and analyze how these services were monetized. In response to these incidents, Microsoft has enhanced its AI protection measures by deploying additional security mitigations on its platform. The company has also revoked the malicious actors' access and implemented countermeasures to prevent future threats.