Trend Micro issues warning over rise of 'vibe crime' as cyber criminals turn to agentic AI to automate attacks
A new report from warns organizations to prepare for a huge increase in attack volumes thanks to agentic AI
Trend Micro is warning of a boom in 'vibe crime' - the use of agentic AI to support fully-automated cyber criminal operations that go way beyond today’s ransomware and phishing campaigns.
In a new report, the cybersecurity firm predicted that agentic AI will massively increase attack volume, with automated phishing, fraud, and breach exploitation becoming continuous background operations.
Criminal ecosystems will move from a traditional Cybercrime as a Service model to what Trend Micro called 'Cybercrime as a Servant’, relying on chained AI agents and autonomous orchestration layers to run criminal businesses end-to-end.
“Agentic AI gives criminals a ready-made arsenal that scales, adapts, and keeps working even when the humans disappear. The real risk is not a sudden AI-fueled explosion of crime, but the slow, unstoppable automation of attacks that used to require skill, time, and effort. This shift is already underway,” said Robert McArdle, director of forward-looking threat research at Trend Micro.
“We will see an optimization of today’s leading attacks, the amplification of attacks that previously had poor ROI, and the emergence of brand new ‘Black Swan’ cybercrime business models.”
Researchers said they expect to see more attacks on enterprise cloud and AI systems, as these provide cyber criminals scalable power, compute, AI capabilities, storage, and access to valuable information they can use to run their agentic architecture.
This, the company warned, will introduce new kinds of attacks – many of which are unprecedented, or expected to grow in scale. Meanwhile, agentic cyber crime will influence the overall setup of today’s criminal ecosystem, giving rise to new or enhanced criminal business models and trends.
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
Looking ahead, Trend Micro said defensive platforms and security solutions will need their own orchestrators and autonomous agents to counter the shift, or risk being overwhelmed.
“For enterprises, this means reassessing security strategy now as well as investing in automation and AI-driven defence," McArdle said.
"Organizations also have to ensure resilience before criminals industrialize their own use of AI, or risk trying to catch up in an exponential arms race that will quickly separate those who were prepared and those were not.”
Agentic AI security warnings ramp up
Trend Micro is by no means the first firm to warn of the looming threat of agentic AI-related cyber crime.
In September, for example, Anthropic admitted that its AI tools had been "weaponized" by hackers to conduct serious attacks against organizations.
The company warned agentic AI is being used across cyber criminal operations, particularly to identify victims, analyze stolen data, and to create ransomware and malware strains.
In a blog post detailing its findings, Anthropic pointed to examples where cyber criminals used Claude Code to automate reconnaissance practices, harvest victim credentials, and penetrate networks at 17 organizations in the healthcare, emergency services, and government sectors.
A similar study from Malwarebytes in early 2025 also highlighted the growing threat posed by agentic AI in cyber criminal operations.
The company’s 2025 State of Malware report said this latest iteration of the technology will “further revolutionize cyber criminal tactics” and enable threat actors to create more potent malware strains.
While warnings over the use of agentic AI among cyber criminals are growing, the use of the technology by defenders offers huge potential, industry stakeholders claim.
AWS CISO Amy Herzog, for example, recently told ITPro that agents will herald a radical shift for cybersecurity practitioners, enabling them to react to attacks in a more efficient manner.
Make sure to follow ITPro on Google News to keep tabs on all our latest news, analysis, and reviews.
MORE FROM ITPRO
- ‘Slopsquatting’ is a new risk for vibe coding developers
- Hackers are using AI to dissect threat intelligence reports and ‘vibe code’ malware
- Agentic AI carries huge implications for security teams
Emma Woollacott is a freelance journalist writing for publications including the BBC, Private Eye, Forbes, Raconteur and specialist technology titles.
-
A spate of cyber attacks has rocked JapanNews With over 100 cyber attacks impacting major sectors this year, Japan’s ruling party is calling for an emergency taskforce to strengthen AI defenses
-
Top takeaways: The AI tokenomics challengeFeature Why invisible metering, compounding agentic workflows, and production scale turn enterprise AI into an open tab – and how leaders can govern for measurable value
-
88% of UK firms have had an “agentic security incident” in the last year – ServiceNow warns more will comeNews Concerns are growing over the scale of adoption and an inability to match “machine-speed” capabilities
-
AI agents have a mind of their own – and that’s a problem for businessesNew research shows that half of organizations are having to deal with agent behaviour that hasn't been authorized or approved.
-
‘Rising threats and under-resourcing for cybersecurity is taking a toll on the people tasked with managing it’: Cyber teams are being pushed to breaking point – and AI is doing little to alleviate strainNews An increasingly perilous threat landscape and lack of funding means cyber teams are being stretched too thin
-
‘We can assume that all threat actors are using AI in some capacity’: Cyber researchers warn hackers are ramping up automated attacksNews Google Threat Intelligence Group has issued a warning over the increased threats posed by hackers using agentic AI tools
-
Trust your AI agents? New research shows ‘memory poisoning’ can dupe them into ‘remembering’ fake information – and it’s a huge security riskNews Memory poisoning allows hidden text on a webpage to be treated as fact and used to make harmful decisions
-
Anthropic’s Mythos AI tried to dupe devs in social engineering attack, collaborated with other agentsInter-agent collaboration is a serious cause for concern, says security expert
-
Anthropic joins OpenAI in admitting loss of control in cybersecurity testsThe company found Claude AI had escaped containment three times and targeted other organizations
-
'It delivers world-class performance at 50 percent of the cost of leading models': Microsoft unveils cut-price AI for security with latest in-house model launchNews Pairing the MAI security model with GPT-5.4 gives benchmark leading results at half the cost, according to the tech giant