Police flag the use of AI by criminals

Hong Kong police are issuing a warning that criminals are increasingly using artificial intelligence in their technology-related crimes, resulting in a surge in ransomware cases during the first three quarters of the current year. The number of such cases increased by 18 percent compared to the same period last year, reaching 40 instances.

However, overall tech crimes dropped by 12 percent to 21,573 cases, and total losses decreased by 15 percent to nearly HK$3.9 billion. Chief Superintendent Raymond Lam of the Cyber Security and Technology Crime Bureau explained that criminals are utilizing agentic AI, which are autonomous systems that operate with little human oversight, to streamline their attack strategies.

These AI systems can be employed for tasks such as system scanning, vulnerability scanning, penetration, and other phases of cyberattacks, making them more effective. Police officials believe that the use of AI has accelerated the pace, volume, and intrusiveness of attacks, making them more successful. Criminals are reportedly employing AI to intensify reconnaissance and phishing campaigns before launching ransomware attacks.

The rising trend underscores the necessity for Hong Kong police to cooperate with mainland authorities and Interpol, as the rapid advancement of AI presents a significant challenge to law enforcement. In response, the Special Administrative Region (SAR) joined Interpol’s first year-long AI-powered cyber operation targeting potential phishing and fraudulent links.

By employing an AI-analysis engine developed by Hong Kong police, officers can identify and block risky websites before malicious links propagate further. Enrique Hernandez-Gonzalez, Assistant Director of Cybercrime Operations at Interpol’s Cybercrime Directorate, noted that such intelligence is shared with 47 jurisdictions, resulting in the inaccessibility of about 90 percent of the 57,000 investigated links.

He added that Hong Kong's information on malicious domains or victims located in other countries is shared through Interpol, enabling those countries to take appropriate action. The second phase of the operation, involving more than 20 jurisdictions across five continents, began last month.