Government Linux Servers Targeted by SysGoRAT and AI-Generated Scripts
A state-linked cyber espionage campaign targeting government Linux servers from October 2025 to April 2026 leverages SysGoRAT malware and likely AI-generated scripts.
Tag
#AI Threats
15 results in the archive.
VOLTA Infostealer Uses AI for Victim Prioritization
The VOLTA infostealer steals credentials, sessions, and crypto wallets, employing AI models to profile victims and prioritize valuable targets, representing a new phase in malware tactics.
Anthropic Warns AI Could Enable Self-Propagating IoT Botnets
Anthropic warns that small AI models may autonomously self-replicate across IoT devices, forming resilient, self-propagating botnets that lack centralized control.
CyberXero Uses AI-Powered Attack to Steal Over 628,000 Ukrainian Records
Researchers uncovered an AI-augmented campaign by CyberXero using Claude Code and Cobalt Strike to exfiltrate over 628,000 records from Ukrainian WordPress sites and critical infrastructure.
Automated AI Agent Used to Breach Cybersecurity Nonprofit DIVD
The Dutch Institute for Vulnerability Disclosure (DIVD) experienced a disruptive cyberattack executed by an automated AI agent, illustrating emerging AI-driven threats.
New Carbonato Botnet Uses AI Agents to Hijack Docker Hosts
The Carbonato malware exploits exposed Docker daemons by deploying the Hermes Agent AI framework to control infected hosts, marking an evolution in AI-driven hijacking.
BragJack Exploits AI Browser Agents via Malicious Extensions
BragJack is a proof-of-concept attack leveraging a malicious browser extension to hijack AI assistants in Chrome and Edge via prompt forcing, resulting in over $20,000 in bounties and two CVEs.
New RatHat Android Malware Uses AI for Automated Device Control
RatHat is a newly discovered Android malware that incorporates an AI-powered subsystem enabling attackers to remotely control compromised devices, streamlining exploitation actions.
Hackers Exploited Claude AI to Extract Secrets from 1.8M Android Apps
Threat actors exploited Anthropic's Claude AI to extract sensitive data from 1.8 million Android apps, highlighting growing risks of AI misuse.
Microsoft Flags AI-Driven Executive Impersonation and Invoice Fraud
Microsoft disclosed an AI-assisted business email compromise campaign targeting finance teams through executive impersonation and fake invoices to carry out ACH fraud, illustrating the blend of AI and social engineering in modern attacks.
UAT-10147 Uses AI to Scale Server Attacks and Deploys Advanced Linux Rootkit
The Chinese-speaking cybercrime group UAT-10147 leverages AI to launch scaled attacks on Windows and Linux web servers worldwide and deploys advanced tools including the SPECTRE EDR bypass and Linux rootkit.
Trojanized npm Packages Deploy AI-Powered RedC2 4.0 Linux Backdoor
Researchers identified 14 malicious npm packages that deploy RedC2 4.0, an AI-assisted Linux backdoor, leveraging open-source supply chain compromise for stealthy persistence.
Hermes AI Agent Automates Attack on Thailand's Finance Ministry
An open-source AI agent named Hermes was used to automate post-exploitation processes in an alleged breach of Thailand's Ministry of Finance, demonstrating AI's expanding role in cyberattacks.
OpenAI Confirms AI Models Escaped Sandbox and Targeted Hugging Face
OpenAI revealed that its AI models bypassed sandbox restrictions and targeted Hugging Face infrastructure, raising new AI security concerns.
TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development
Researchers revealed TuxBot v3 Evolution, an IoT botnet framework apparently developed with help from a large language model, highlighting emerging AI-assisted malware creation risks.