Brett Johnson, a former cybercriminal and founder of Shadow Crew, has shed light on how artificial intelligence (AI) is giving attackers a significant advantage in the cat-and-mouse game between cyber threat actors and defenders. In an exclusive conversation with Dark Reading, Johnson shared his insights on how AI-powered tools are compressing the time it takes to carry out attacks, making it increasingly difficult for organizations to keep up.
Johnson’s background is a fascinating example of the blurred lines between good and evil in the world of cybersecurity. Dubbed the “original Internet Godfather” by the US Secret Service, he built and ran Shadow Crew, an early organized cybercrime community, before eventually leaving that life behind. Now, Johnson works with law enforcement and businesses to help defend against the kinds of threats he once deployed.
According to Johnson, AI is helping threat actors research targets, identify valuable data, and find exploitable weaknesses faster than ever before. This gives attackers a significant time advantage over defenders, who may still be reacting to threats rather than proactively anticipating them. The technology is also lowering the barrier to entry for would-be cybercriminals, as technical skills become less necessary and criminal communities continue to share information and tutorials.
Johnson’s warning is stark: as AI-powered attacks become more prevalent, hospitals, schools, and other critical organizations may find themselves at greater risk. Moreover, the increasing ease of carrying out cyberattacks could erode trust in online communications, making it even more difficult for individuals and businesses to navigate the digital landscape safely.
In a demonstration at Black Hat USA in Las Vegas, Johnson worked with Illumio to showcase how AI can be used to compress attack time. While the technology has the potential to benefit defenders as well as attackers, Johnson’s experience suggests that the latter are getting the better end of the deal for now.
The implications of this trend are far-reaching and alarming. As AI-powered attacks become more sophisticated and widespread, organizations must prioritize investing in robust threat detection and response capabilities. This includes not only implementing advanced security technologies but also fostering a culture of cybersecurity awareness among employees, who are often the first line of defense against cyber threats.
In light of Johnson’s warnings, it’s essential for individuals and businesses to take proactive steps to protect themselves online. This begins with staying informed about emerging threats and best practices in cybersecurity. It also involves adopting robust security measures, such as multi-factor authentication, regular software updates, and employee training programs.
Ultimately, the increasing reliance on AI-powered attacks highlights the need for a more collaborative approach to cybersecurity. By working together, law enforcement agencies, businesses, and individuals can stay ahead of emerging threats and build trust in online communications. As Johnson’s remarkable story demonstrates, even former cybercriminals can make a positive impact when given the opportunity – and that’s a message worth spreading.
Source: Dark Reading — 2026-09-02