Malware evasion made easier with AI — but behavior still gives it away
ReversingLabs says Midnight Blizzard’s AI-rebuilt backdoor kept the same detectable behavior across five variants.
56
Threat actor
Cozy Bear
- Mentions · 7d0
- Mentions · 30d1
- All mentions3
- First seenAug 11, 2026
- Last mentioned16d ago
Timeline
3 articles · newest firstLatest Anthropic horror story chills with tales of kamikaze drone swarms and bioweapons research
Anthropic threat report says APT29, ShinyHunters and others used Claude models to automate cyberattacks, surveillance, and bioweapons research.
78
CaptiveCrunch: Midnight Blizzard Weaponizes Hotel Wi-Fi Captive Portals to Steal Microsoft 365 Credentials
Zscaler details CaptiveCrunch: Midnight Blizzard's Storm-2945 compromises hotel Wi-Fi captive portals to redirect guests and harvest Microsoft 365 credentials via device code phishing.
72
Appears with
- Midnight Blizzardthreat actor · 3
- APT29threat actor · 3
- Anthropicorganization · 2
- Microsoftvendor · 2
- GTG-20006threat actor · 2
- Anthropicvendor · 2
- ShinyHuntersthreat actor · 1
- Claude Opusai model · 1
- Claude Sonnetproduct · 1
- Coral Sleetthreat actor · 1
- Claudeproduct · 1
- CornFlakemalware · 1
- ReversingLabsvendor · 1
- Zscalervendor · 1
- CaptiveCrunchmalware · 1
- Claude Haikuproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.