{"schema_version":"0.10.0","id":"LR-2026-0441","record_version":1,"title":"AI-assisted phishing campaign via Railway compromises hundreds of organizations","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":46.7,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":3.84,"unhedged_language":4.44},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"1 report: CyberScoop · subject to change","original_document":null,"reports_total":1,"reports_independent":1,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"1 report: CyberScoop · subject to change"}]},"sources_hash":"a16f1e492a3800c48c98b868478a731ff6ffd34ff6a4d483a31d7eb60312e469"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-03-23","incident_class":"security_compromise","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"A phishing campaign used Railway, a platform-as-a-service host, to set up credential harvesting infrastructure, with lures that researchers believe were generated by AI tools. The campaign exploited Microsoft's device authentication flow to obtain valid OAuth tokens without a password or multifactor authentication. Huntress reported that hundreds of its customers fell for the scams and that 344 victims were detailed in its blog. Railway said it was first contacted by Huntress on March 6 and banned the associated accounts and blocked the domains. Huntress then issued a conditional access policy update to 60,000 Microsoft cloud tenants on emails from Railway domains. Railway's heuristics are built to catch correlations, and the campaign avoided those signals.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":"external_attacker","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":"Huntress issued a conditional access policy update to 60,000 Microsoft cloud tenants on emails from Railway domains","precursor_events":null,"primary_risk":"RK03","control_chain":[{"layer":"L4","party":"target","party_name":null,"control_id":"J9","outcome":"failed","reason":null,"quote":"By using compromised domains and pumping out bespoke lures, the phishing emails avoid most commercial email filtering solutions.","source_index":0,"reviewed":false},{"layer":"L4","party":"target","party_name":null,"control_id":"J2","outcome":"got_around","reason":null,"quote":"The phishing campaign exploits Microsoft’s authentication flow for devices such as smart TVs, printers and terminals, which gives the attacker valid OAuth tokens for that account for up to 90 days without needing a password or multifactor authentication.","source_index":0,"reviewed":false}],"remediations":[{"by":null,"kind":"fix","date_reported":null,"controls_added":["D7"],"quote":"“The associated accounts were banned and the domains were blocked,” Saraceno said.","source_index":0,"reviewed":false},{"by":null,"kind":"fix","date_reported":null,"controls_added":["J9"],"quote":"To protect customers, Mozeleski said Huntress issued a conditional access policy update Wednesday to 60,000 Microsoft cloud tenants on emails coming from Railway domains, an act he described as “not anything we’ve ever done before.”","source_index":0,"reviewed":false}]},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":344,"severity":"major","severity_because":"Many third parties affected: the source states a count of 344 victims detailed in the Huntress blog, which meets the major tier test of a stated count of two or more affected parties.","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://cyberscoop.com/huntress-railway-ai-phishing-campaign-compromised-hundreds-of-organizations/","publisher":"CyberScoop","date":"2026-03-23","type":"press","title":"An AI-powered phishing campaign has compromised hundreds of organizations - CyberScoop","archived_url":null,"attachment":"first_report","independence":"independent"}],"per_field_confidence":{"event.incident_class":"C","event.adversarial_actor":"C","event.remediation":"C","impact.third_parties_affected_count":"C","impact.severity":"D","impact.severity_because":"D","event.primary_risk":"D","event.control_chain":"C","event.remediations":"C","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","event.detection_method":"D","context.country":"D","system.developer":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"event.incident_class":[{"source_index":0,"quote":"A phishing campaign tied to AI cloud-hosting service Railway has given hackers access to the Microsoft cloud accounts for hundreds of businesses, according to researchers at Huntress."}],"event.adversarial_actor":[{"source_index":0,"quote":"Rich Mozeleski, product manager for Huntress’ identity team, told CyberScoop the campaign is currently tied to a smaller actor and approximately a dozen IP addresses, but has managed to compromise hundreds of targets in the past few weeks."}],"event.remediation":[{"source_index":0,"quote":"To protect customers, Mozeleski said Huntress issued a conditional access policy update Wednesday to 60,000 Microsoft cloud tenants on emails coming from Railway domains, an act he described as “not anything we’ve ever done before.”"}],"impact.third_parties_affected_count":[{"source_index":0,"quote":"The affected entities span a range of sectors: construction and trade companies, law firms, nonprofits, real estate, manufacturing, finance and insurance, healthcare, government and public safety organizations were all among the 344 victims detailed in the Huntress blog."}],"impact.severity":[{"source_index":0,"quote":"The affected entities span a range of sectors: construction and trade companies, law firms, nonprofits, real estate, manufacturing, finance and insurance, healthcare, government and public safety organizations were all among the 344 victims detailed in the Huntress blog."}],"impact.severity_because":[{"source_index":0,"quote":"The affected entities span a range of sectors: construction and trade companies, law firms, nonprofits, real estate, manufacturing, finance and insurance, healthcare, government and public safety organizations were all among the 344 victims detailed in the Huntress blog."}],"event.control_chain":[{"source_index":0,"quote":"By using compromised domains and pumping out bespoke lures, the phishing emails avoid most commercial email filtering solutions."},{"source_index":0,"quote":"The phishing campaign exploits Microsoft’s authentication flow for devices such as smart TVs, printers and terminals, which gives the attacker valid OAuth tokens for that account for up to 90 days without needing a password or multifactor authentication."}],"event.remediations":[{"source_index":0,"quote":"“The associated accounts were banned and the domains were blocked,” Saraceno said."},{"source_index":0,"quote":"To protect customers, Mozeleski said Huntress issued a conditional access policy update Wednesday to 60,000 Microsoft cloud tenants on emails coming from Railway domains, an act he described as “not anything we’ve ever done before.”"}],"event.summary":[{"source_index":0,"quote":"Mozeleski said that in addition to being more sophisticated than usual, there were no identical emails or domains used, leading researchers to suspect that they may have been generated through artificial intelligence tools."},{"source_index":0,"quote":"Researchers believe the attackers were weaponizing Railway’s Platform as a Service — built to help non-coders build websites and tools — to spin up credential harvesting infrastructure for the campaign."},{"source_index":0,"quote":"The phishing campaign exploits Microsoft’s authentication flow for devices such as smart TVs, printers and terminals, which gives the attacker valid OAuth tokens for that account for up to 90 days without needing a password or multifactor authentication."},{"source_index":0,"quote":"Ultimately, Huntress has seen hundreds of its customers fall for the phishing scams, though they claim to have prevented post-compromise activity in all cases."},{"source_index":0,"quote":"In response to questions from CyberScoop on Friday, Railway solutions engineer Angelo Saraceno said the company is aware of the incident and was first contacted by Huntress on March 6 regarding phishing traffic originating from a specific IP address and three domains."},{"source_index":0,"quote":"“The associated accounts were banned and the domains were blocked,” Saraceno said."},{"source_index":0,"quote":"To protect customers, Mozeleski said Huntress issued a conditional access policy update Wednesday to 60,000 Microsoft cloud tenants on emails coming from Railway domains, an act he described as “not anything we’ve ever done before.”"},{"source_index":0,"quote":"“When a campaign avoids those signals, it gets further than we’d like.”"}]},"notes_on_gaps":"The sources do not state whether an autonomous AI agent was involved, so no agent-related fields or failure classes are given; it is unclear whether the AI tool was Railway's or a separate one. Sources do not give the date of occurrence, date of detection or date of disclosure as stated dates; the article date 2026-03-23 is not used as a disclosure date. The responsible party, the trigger, the detection method, the country and the industry of the system are not stated, so they are omitted. The system fields are omitted because no AI model or system is named. Loss amounts, records exposed and remediation hours are not stated. Judgements made: incident_class set to security_compromise; root_cause set to oversight based on Huntress's view on vetting; adversarial_actor set to external_attacker based on the 'smaller actor' description; severity set to major from the stated count of 344 victims; the conditional access update was mapped to control J9 and Railway's account bans to D7, both by judgement. Huntress's counts of 'hundreds' and 'more than 50 compromises a day' are not exact figures and were not used as counts; the 344 figure is the detailed victim count in the Huntress blog and the sources say the true total may be in the thousands. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (1 report: CyberScoop · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"went_wrong","text":"The campaign exploited Microsoft's device authentication flow, which gave the attacker valid OAuth tokens for up to 90 days without a password or multifactor authentication.","quote":"The phishing campaign exploits Microsoft’s authentication flow for devices such as smart TVs, printers and terminals, which gives the attacker valid OAuth tokens for that account for up to 90 days without needing a password or multifactor authentication.","source_index":0,"grade":"C"},{"step":"reached","text":"Huntress reported that hundreds of its customers fell for the scams, though it said post-compromise activity was prevented in all cases it saw.","quote":"Ultimately, Huntress has seen hundreds of its customers fall for the phishing scams, though they claim to have prevented post-compromise activity in all cases.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://cyberscoop.com/huntress-railway-ai-phishing-campaign-compromised-hundreds-of-organizations/"]},"analysis":{"sections":{"timeline":[{"text":"The campaign's tempo increased massively, after compromising a few dozen targets a day in early March.","quote":"In early March it was compromising a few dozen targets a day, but starting March 3, there was a “massive increase” in that tempo.","source_index":0,"when":"March 3"},{"text":"Railway was first contacted by Huntress about phishing traffic from a specific IP address and three domains.","quote":"In response to questions from CyberScoop on Friday, Railway solutions engineer Angelo Saraceno said the company is aware of the incident and was first contacted by Huntress on March 6 regarding phishing traffic originating from a specific IP address and three domains.","source_index":0,"when":"March 6"},{"text":"Railway banned the associated accounts and blocked the domains.","quote":"“The associated accounts were banned and the domains were blocked,” Saraceno said.","source_index":0,"when":null},{"text":"Huntress issued a conditional access policy update to 60,000 Microsoft cloud tenants on emails from Railway domains.","quote":"To protect customers, Mozeleski said Huntress issued a conditional access policy update Wednesday to 60,000 Microsoft cloud tenants on emails coming from Railway domains, an act he described as “not anything we’ve ever done before.”","source_index":0,"when":"Wednesday"},{"text":"Huntress continued to see more than 50 compromises a day tied to Railway phishing domains.","quote":"Earlier Friday, Mozeleski told CyberScoop that Huntress continued to see more than 50 compromises a day tied to Railway phishing domains.","source_index":0,"when":"Friday"}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://cyberscoop.com/huntress-railway-ai-phishing-campaign-compromised-hundreds-of-organizations/"]}}