The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
German authorities report a surge in cybercrime, with AI systems enabling more sophisticated attacks such as convincing phishing emails and ransomware. These AI-enhanced attacks have caused significant financial losses, disrupted critical infrastructure, and targeted businesses and public services, highlighting AI's direct role in escalating cyber threats in Germany.[AI generated]
Why's our monitor labelling this an incident or hazard?
The article explicitly states that AI is used to enhance cybercriminal activities, such as generating more convincing phishing emails, which have resulted in real cyberattacks causing substantial economic damage and disruption to critical infrastructure (e.g., Deutsche Bahn). This fits the definition of an AI Incident because the development and use of AI systems have directly led to harms including economic loss and disruption of critical infrastructure. The article also mentions ongoing law enforcement responses but focuses primarily on the realized harms and AI's role in them, not just potential future risks or responses, so it is not Complementary Information or an AI Hazard.[AI generated]