I don’t think that’s quite right. If the article is correct, the compromised version of Homebrew that the first employee installed allowed them to find out information about the team, which helped with the subsequent social engineering attack. No AI so far.

The subsequent piece of malware the second employee installed during the fake interview process was designed to allow external access, so the attackers were able to remotely make use of internal AI systems that could perform privileged actions and open up bigger holes in the company’s security.