This cloud extortion attack is done using AI Agentic workflows by a lone threat actor. Anyone, including those with little experience can simply launch AI models to compromise websites using just initial access. By using cloud environment API keys, hackers can use AIs to scan the network for valuable targets and steal data as well as causing operational downtime for businesses. This leads to data loss and system compromise, and is an important threat since it is not done by any group, it can simply be done by someone who has time and prompts the models to carry out attacks. Some solutions include locking down credentials and also trying to use local AI models for defense.