HP Wolf Security Uncovers Evidence of Attackers Using AI to Generate Malware

Publish Time: 01 Jan, 1970

News Highlights:

HP threat researchers identified a campaign targeting French-speakers using malware believed to have been written with the help of GenAI
The malware's structure, comments explaining each line of code, and native language function names and variables all indicate the threat actor used GenAI to create the malware
The activity shows how GenAI is accelerating attacks and lowering the bar for cybercriminals to infect endpoints
HP also found ChromeLoader campaigns are getting bigger and more polished, using malvertising to direct victims to well-designed websites offering fake tools like PDF converters
Installing the fake applications, delivered as MSI files, causes malicious code to run on endpoints
The malware loads a browser extension that enables attackers to take over the victim's browsing session and redirect searches to attacker-controlled sites
Another campaign showed some cybercriminals are bucking the trend by shifting from HTML files to SVG vector images to smuggle malware