Global Cybercrime Network Storm-2139 Allegedly Exploits AI to Generate Deepfake Content
Description
A global cybercrime network, Storm-2139, allegedly exploited stolen credentials and developed custom tools to bypass AI safety guardrails. They reportedly generated harmful deepfake content, including nonconsensual intimate images of celebrities, and their software is reported to have disabled content moderation, hijacked AI access, and resold illicit services. Microsoft disrupted the operation and filed a lawsuit in December 2024, later identifying key members of the network in February 2025.
Actors
Alleged Deployers
- unidentified-storm-2139-actor-from-illinois
- unidentified-storm-2139-actor-from-florida
- storm-2139
- ricky-yuen-(cg-dot)
- phat-phung-tan-(asakuri)
- arian-yadegarnia-(fiz)
- alan-krysiak-(drago)
Alleged Developers
- unidentified-storm-2139-actor-from-illinois
- unidentified-storm-2139-actor-from-florida
- storm-2139
- ricky-yuen-(cg-dot)
- phat-phung-tan-(asakuri)
- arian-yadegarnia-(fiz)
- alan-krysiak-(drago)
Harmed Parties
- victims-of-deepfake-abuse
- openai
- microsoft
- celebrities
- azure-openai-customers
- ai-service-providers
Classification
Risk Domain
Malicious Actors & MisuseRisk Subdomain
4.3. Fraud, scams, and targeted manipulation
MIT Risk Profile
Source
Related Incidents (Malicious Actors & Misuse)
View all →Female Students at Westfield High School in New Jersey Reportedly Targeted with Deepfake Nudes
Oct 2023
ChatGPT Was Alleged to Have Aided Planning of Florida State University Mass Shooting
Apr 2025
Ongoing Purported AI-Assisted Identity Fraud Enables Unauthorized Access to Western Companies by North Korean IT Workers
Research Papers on This Topic
How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs
AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agents
Regulating ChatGPT and other Large Generative AI Models
Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack