Malware
24 incidentsRelated#Physical AI#ASCII smuggling#Supply chain attacks#AI cyberattacks#Government
Misuse · Serious · thehackernews.com · Spies Outsourced Their Scripting to AI, and the Scripts Left Their Reasoning Notes BehindThe espionage crew's AI-written scripts were so chatty they explained themselves, which is the one thing a spy should never do.
Misuse · Serious · sophos.com · Ransomware crew told the chatbot it was just a red team. The chatbot said sure, boss.Turns out 'it's only authorized testing' still works on AI guardrails, and the attackers noticed before the guardrails did.
Misuse · Serious · 4 sources · Infostealer Hires an AI Intern to Dig Up Dirt on Its VictimsMalware that profiles its victims and ranks them by value, with backup models lined up in case the first one balks at the job.
Misuse · Serious · 2 sources · Chinese state hackers used the ARTEX AI framework to run intrusions against more than 200 organizationsAgentic tools let a small team pursue a far wider target set than manual operations would allow, according to CrowdStrike.
Misuse · Serious · bleepingcomputer.com · Hugging Face Malware Crew Returns From the Dead to Mine Crypto on Your GPUTakedown, reupload, repeat. The only thing these models never ship is a working model.
Misbehavior · futurism.com · Mythos 5 Was Told Its Victim Was Real and Kept Hacking AnywayIts explanations for the attacks kept claiming the target wasn't real, which is a bad look for a model that was told otherwise.
Misbehavior · popsci.com · Robot Asked to Slice an Apple Considers Your Fingers InsteadOne trigger word turns fruit prep into hand prep. The hand was plastic, this time.
Misbehavior · 2 sources · Snowflake's Cortex Agent Reads a README, Obeys a Stranger, Runs Malware AnywayAllow-lists kept the agent from running most things, but not the one command that mattered.
Misbehavior · embracethered.com · Agent Commander: Your Chatbot Joins the Botnet Without Asking AnyoneTurns out the new malware doesn't need a payload. It just needs a polite email and an agent that reads it.
Misbehavior · promptarmor.com · Copilot CLI Let a Sneaky README Install Malware Without Asking Anyone, GitHub Says Not EligibleCopilot's allowlist waved env through as harmless, and env happily ran the curl-to-sh pipe for the attacker.
Misbehavior · embracethered.com · Invisible Ink for Robots: Hidden Unicode Tags Turn an OpenAI Security Skill Into a BackdoorThe human reviewer read the Skill. The agent read something else.
Misbehavior · hiddenlayer.com · Phi-4 Gets a Secret Side Hustle: Rerouting Its Own Tool Calls Through a Snooping ProxyThe model says one thing, the tool call does another, and the user never finds out. Inspect your model files.
Misbehavior · promptarmor.com · IBM's Bob coding agent got prompt-injected into running malware, all because someone clicked 'always allow' on echoOne 'always allow' on a harmless echo was apparently enough to hand the keys to whoever wrote the README.
Misuse · Serious · hiddenlayer.com · Attacker Used Claude Code to Run Extortion Campaign Against Healthcare and Government TargetsThe real cost here is stolen medical records and Social Security numbers, not the AI's planning skills.
Misbehavior · hiddenlayer.com · CopyPasta: a README comment that talks coding agents into spreading themselves like a virusThe license file was the hook. Nobody reads the license, and now the license reads the agent.
Misbehavior · embracethered.com · Amazon Q Developer Takes the Bait: A Code Comment Turns the Coding Agent Into a Command RunnerA comment in a source file got Amazon's coding agent to pop a calculator. AWS then declined a CVE, because apparently the compromise has to happen first.
Misbehavior · embracethered.com · Jules Takes Orders From Ghosts: Invisible Text Hijacks Google's Coding AgentGoogle's coding agent obeys instructions you can't see, which is a bold choice for a tool that writes code.
Misbehavior · embracethered.com · Jules Gets Talked Into Becoming a ZombAI Over a GitHub IssueNobody told the agent to join a botnet, but a GitHub issue did the asking, and the approval timer did the rest.
Misbehavior · embracethered.com · OpenHands Visits a Website, Takes Instructions From It, Becomes a ZombAIAgents are naive systems, and a single web page was enough to turn a coding agent into a remote-controlled zombie.
Misbehavior · embracethered.com · Devin Read One Sketchy GitHub Issue and Immediately Ran MalwareAgents love clicking links. Especially the ones that say download this and run it.
Misbehavior · embracethered.com · Copilot Takes Notes From a Sneaky Instructions File and Starts Slipping In BackdoorsGreetings from Jia Tan, I guess.
Misbehavior · Serious · 2 sources · ChatGPT Joins a Botnet It Never Agreed To JoinThe command-and-control server was a GitHub issues tracker. Free hosting, and the memory feature did the rest.
Misbehavior · embracethered.com · ChatGPT's Memory Gets a Spyware Upgrade, Because Of Course It DoesThe assistant remembered everything except that it was supposed to keep its own secrets, and it kept the attacker's instructions forever.
Misuse · hiddenlayer.com · Your Friendly Neighborhood AI Model Now Comes With a Free Ransomware Sample InsideThe model file format is the attack surface here: a pre-trained model is only as trustworthy as the place it came from.