AI is now the weapon, target, and infrastructure of cybercrime.

Criminals are now using artificial intelligence, or AI, which creates a huge shift in cybercrime. Researchers wanted to map out this new wave of digital illegal activity. They named it Cybercrime 3.0, coming after earlier eras that focused on standardizing criminal laws and policing blockchain offenses. To show how this works, the authors sorted AI-related crimes into three distinct groups. First, criminals can use AI as their underlying infrastructure to run operations. Second, they can wield AI as a direct tool to commit digital or traditional crimes. Third, bad actors can make AI itself the target of adversarial attacks, aiming to manipulate or break the system. Finally, the authors found that these evolving AI methods create possible tensions with substantive criminal law.

Why it matters

If you use AI tools or rely on systems that do, you are already in the crosshairs. Criminals can weaponize AI to automate scams, break into systems, or attack the AI models themselves. This paper gives law enforcement and lawmakers a way to categorize these new threats so they can write laws that actually work.

Questions answered