TL;DR

Security vendor Bitdefender said on 3 November that a 3AM ransomware affiliate breached a UK school estate in September in a “hybrid” operation, with a person deciding direction and what looked like an AI agent handling retries. It is the first such case the company has documented in Europe. Its own caveats are the useful part: this is inference from behaviour, and it calls the case “an anecdote, and not a trend”.

The school estate is not named. Bitdefender counts 47 systems on its machine list, eight of them domain controllers, spread across directories that were originally separate from one another. The intruder relied mostly on tools built into Windows, a standard approach for ransomware crews, and went looking for the names of other schools.

Why Bitdefender suspects a model

The evidence is in the timing and the mistakes. On 13 September a failed PowerShell command was re-run, altered and then dropped for a different tool, with each step following within a minute or so. Nine retries came 40 to 101 seconds apart, with big rewrites arriving as fast as small tweaks, yet starting a fresh task could take minutes. Bitdefender reads that split as a person setting direction, with a model handling repetitive fixes.

Another sign was a request to a Veeam backup interface using a port and sign-in approach absent from Veeam’s own documentation, the sort of error the company associates with recalling details rather than looking them up. The clearest example it offers is the work of linking the estate’s domains with trust relationships on 18 September, though it labels that reading interpretation rather than a finding. Because the staging machine had no security agent on it, Bitdefender says it cannot state who or what issued the commands.

What it changes for defenders

The report is careful about scale. Most intrusions it investigates show no such change, and the attack was not especially quick. “Nothing here is new,” it says of the techniques, adding that the practices stopping conventional ransomware stop this as well. Its advice includes keeping admin accounts for separate domains apart, treating backups as a target and blocking shells on machines that do not need them. It adds that the retry behaviour is noisy, which gives defenders something to look for.

The report appeared on the same day as the National Cyber Security Centre’s warning about AI-powered ransomware. Bitdefender sells security services, so its account is not disinterested. In our view, the takeaway for schools and trusts with several linked domains is unglamorous: domain trusts are rarely created, and the company notes that alerting on one costs little.