https://cyberinsider.com/disney-hacker-admits-using-malware-laced-ai-art-app-to-achieve-breach/

A 25-year-old Santa Clarita man has agreed to plead guilty to hacking a Disney employee’s personal computer, stealing login credentials, and exfiltrating 1.1 terabytes of confidential data from internal Slack channels.

The charges stem from a targeted cyberattack carried out in the spring and summer of 2024 that compromised Disney’s internal communications and led to the public leak of sensitive corporate data.

“Kramer, operating under the alias “NullBulge,” created and distributed a malicious program disguised as an AI art generation tool. He uploaded this trojanized application to GitHub and other public repositories in early 2024, enticing users interested in generative AI. At least three victims, including one Disney employee, downloaded the program. Once executed, the software provided Kramer with remote access to the victims’ machines and stored credentials.”

After infiltrating the employee’s personal system, Kramer accessed corporate Slack credentials to infiltrate Disney’s internal Slack workspace and downloaded around 1.1 terabytes of data from nearly 10,000 channels including unreleased media projects, internal code, links to APIs, and credentials for internal web services.