An operator-driven phishing kit uses live WebSocket connections to relay Google sign-in steps in real time, stealing authenticated sessions from academic targets.
A technical examination suggests major AI developers possessed criminal intent for recent unauthorized system accesses, challenging claims that autonomous model behavior absolves them of liability.