Recorded Future says AI mostly accelerates familiar cyberattacks
Of 103 incidents, 32 used AI in malware or operations, including one Taiwan campaign with up to eight agents.
1
Stories per day · 30 days
3 RSS
Relatedapt291claude1detection1developer-tools1midnight-blizzard1polymorphic-malware1recorded-future1reversinglabs1shai-hulud1supply-chain1
13 stories, newest first · one card per story
Stories tagged #ai-malware
Malware evasion made easier with AI — but behavior still gives it away
ReversingLabs says Midnight Blizzard’s AI-rebuilt backdoor kept the same detectable behavior across five variants.
7
Trust and the enticing consultancy offer
Cisco Talos warns security pros of fake consultancy offers used to trick them into abusing privileged access, and released the CAIRN AI-malware hunting toolkit.
2
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
Talos analyzed CLOSEDQUORUM, Windows malware that lets up to four AI models vote on its next action.
5
This Malware Doesn’t Wait for Hackers—It Asks AI Models What to Do Next
Cisco Talos documents CLOSEDQUORUM, a Windows implant that votes across DeepSeek, Qwen, Mistral, and Gemini APIs to choose attack actions autonomously.
1
AI malware just removed the human from the attack loop
Cisco Talos uncovers CLOSEDQUORUM, first 'LLM-as-C2' malware using multi-model judge panel to autonomously steal credentials and crypto wallets.
1
New ClosedQuorum Windows malware uses AI for attack decisions
ClosedQuorum, a Go Windows implant, lets several LLMs choose post-compromise actions without a human operator.
2
A New Tool for Tracking AI Malware Uncovers Malware That Operates Without Human Control
Cisco Talos releases CAIRN to track AI malware and documents CLOSEDQUORUM, an unconfirmed Windows implant steered by LLMs.
1
Researchers uncover malware that uses AI to choose its next move
Cisco Talos documents CLOSEDQUORUM, a Windows implant that lets commercial LLMs vote on its next action.
2
AI-Powered Malware Rewrites Itself Every Hour to Evade Signature-Based Detection
Morphisec warns AI-driven malware like PROMPTFLUX rewrites its code hourly via the Gemini API, eroding signature-based detection.
6
AI Malware Keeps Changing Its Code to Break Traditional Signature-Based Detection
Google's GTIG documents AI-enabled malware PROMPTFLUX and PROMPTSTEAL that query LLMs at runtime to rewrite code and evade signature-based detection.
4
What We Missed: Did ShinyHunters 'Breach' ReliaQuest?
Dark Reading editors discuss whether ShinyHunters breached ReliaQuest and new research questioning the prevalence of AI-generated malware.
The AI Malware Maturity Gap
Recorded Future introduces AIM3, a five-level maturity model for AI malware, showing current attacker AI use is mostly AI-assisted rather than autonomous.
6