Agencies are warning of yet another highly advanced, state-sponsored group of Chinese hackers using malware that have been evading detection for years and have an average victim dwell time of 393 days.
Google’s Threat Intelligence Group (GTIG) documents the first known uses of their Gemini AI assistant to actively participate in live malware attacks, with the capability to do things like generate scripts and change up obfuscation methods on the fly without a hacker’s input.
Russian malware discovered by Ukraine’s national cyber response team has looped in an Alibaba chatbot that allows commands to be executed on compromised systems in real-time, something that could confound automated detection capabilities going forward.
Venice.ai provides a decentralized and censorship-free AI chatbot with capabilities on par with leading LLMs. It’s the first easily accessible “clear web” chatbot that will readily provide the user with malware, custom phishing messages and instructions for criminal activities upon request.
The report takes DeepSeek R1 to task for its poor guardrails, documenting the creation of malware including a basic keylogger and several types of ransomware via very basic sorts of prompt hacking that other major models long ago addressed.
Theoretical GenAI attack can corrupt the databases of the likes of ChatGPT and Gemini Pro, causing them to pass on a form of self-replicating malware that can be used to send emails and steal files.
Crypto drainers in an “as a service” model burst onto the scene in 2022, but 2023 was the year that they ascended to “major threat” status. Inferno malware is thus far the most successful example in terms of victim count (about 130,000) and stolen assets (about $87 million worth).
Versions of the Chinese shopping app up to the most recent release were found to have malware present. The malicious code is an attack chain that specifically targets Samsung mobile devices, first discovered in early 2021.
Hackers have apparently been able to gain illicit access to the web hosting company since at least 2019. It is not clear when the source code was stolen (or exactly what pieces were taken), but malware was apparently planted in the cPanel control system.
Hacker breached 2K Games’ helpdesk system and sent fake follow-ups to customer support tickets with link to info-stealing malware that searches target systems for credentials and authentication.