Loading story…
Palo Alto Networks' Unit 42 reviewed 405 malware samples that incorporated AI and found that the vast majority were not active threats but proof-of-concept code, security testing artifacts, or malware merely branded around AI themes. Only 12 samples—about 3% of the dataset—were observed on Cortex XDR-protected endpoints, and WildFire session data showed only roughly 15 to 20 unique hashes, indicating that about 97% of the samples remained confined to repositories, sandboxes, or validation environments rather than real-world operations.
The operational activity that was observed mapped to five malware families: FunkSec ransomware, a trojanized AI-themed application, the Oyster backdoor, the Rhadamanthys stealer, and a COM hijacking DLL. Unit 42 said existing defenses, including behavioral analytics, sandboxing, code-signing anomaly detection, and entropy analysis, detected and blocked all observed samples, concluding that AI is currently being used more to speed malware development and strengthen social-engineering lures than to introduce fundamentally new runtime behavior or broadly successful evasion techniques.
Track how attackers are adapting to this technology.
5 events from the most recent confirmed update back to the earliest known activity.
An NSIS installer posing as the Recipe Lister application was the most widely encountered sample, appearing across more than 50 organizations and generating over 6,500 endpoint profile records and 9,600 XDR alerts during the observation window. Palo Alto said Cortex XDR blocked it through local analysis, behavioral protection, and WildFire verdicts, and no execution succeeded on a protected endpoint.
Using endpoint telemetry from non-test tenants covering December 2024 through June 2025, Palo Alto found only 12 of 405 AI-enabled malware samples on Cortex XDR-protected endpoints, representing 3% prevalence in production. These samples appeared across organizations in three countries and mapped to five malware families.
Seven distinct FunkSec ransomware variants later seen in endpoint telemetry were compiled between January 1 and January 6, 2025. Palo Alto noted the variants shared a Rust codebase and showed iterative development through embedded PDB paths.
Palo Alto Networks queried WildFire session data covering June 2024 through June 2025 and found only about 15 to 20 unique hashes from its 405-sample AI-enabled malware dataset, indicating roughly 4% prevalence in observed traffic.
Palo Alto Networks analyzed 405 malware samples that incorporated AI and concluded that most were proof-of-concept code, testing artifacts, or AI-branded malware rather than operational threats. The company reported that all observed operational samples were detected and blocked by existing controls, with no novel detection approach required.
Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.
Indicator values are masked on this page. View all 12 in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
securityweek.com
Open sourceunit42.paloaltonetworks.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Palo Alto Networks' Unit 42 reported that artificial intelligence is currently serving mainly as a force multiplier for attackers, speeding up and scaling established intrusion workflows rather than introducing entirely new attack methods. Drawing on incident response investigations, the report said threat actors still rely on familiar tactics including **credential theft**, **phishing**, exploitation of known vulnerabilities, and **ransomware**, while using AI to accelerate malware development, automate content generation, and streamline reconnaissance. Unit 42 leaders Andy Piazza and Richard Emerson said AI-enabled attacks have not yet required enterprises to redesign core defense strategies, but warned that broader attacker adoption could strain detect-and-respond operations and raise the value of prevention-focused controls. The report also pointed to emerging activity including **AI-assisted malware**, malware that queries **LLM** or **MCP** servers for command-and-control guidance, **agentic ransomware**, and **token jacking** aimed at cloud AI services and LLM API credentials.
Jul 17, 2026
Security researchers and industry commentary describe a broader rise in **AI-assisted cybercrime**, with attackers using generative AI to improve phishing lures, clone legitimate login pages, and scale social-engineering operations. Reporting highlights that phishing remains a leading initial access vector, while **phishing-as-a-service** and AI-generated content are making campaigns more convincing and easier to produce at volume. IBM similarly warns that AI is acting as a force multiplier for attackers, lowering the cost of malware development and enabling more disposable, harder-to-attribute malicious tooling. Kaspersky documented active campaigns in which threat actors used **Google Search ads** and fake documentation pages to distribute the **AMOS** infostealer on macOS and **Amatera** on Windows, disguising the malware as popular AI tools including **OpenClaw**, **Claude Code**, and **Doubao**. By contrast, ZDNET's article focuses on the business and product-security shortcomings of Moltbook and OpenClaw acquisitions rather than a specific threat campaign, making it adjacent but not part of the same security event. The material overall is **not fluff** because it includes substantive threat reporting and technical security analysis, even though the references describe related developments rather than one discrete incident.
Jun 29, 2026
Cisco Talos reported that threat actors are increasingly using cloud AI tools such as Claude Code, CodeX, Cursor, and Gemini to support malicious operations, after analyzing prompt artifacts recovered from compromised endpoints. The research found three dominant use cases: AI as a malware and software engineering assistant, AI as a criminal force multiplier, and AI as an accelerator for vulnerability research and penetration-testing-style activity. Talos said existing model guardrails were often ineffective, with actors bypassing them through false ownership claims, bug-bounty or CTF pretexts, task decomposition across sessions, persistent persona conditioning, semantic evasion, or by moving to uncensored models. Case studies showed AI being used to help build DDoS tooling targeting Android TV devices, bulk email validation and phishing-adjacent infrastructure based on PowerMTA and Node.js, credential-harvesting workflows including abuse of exposed `.git/config` files and React2Shell techniques, and cryptojacking campaigns that used weak Deluge and qBittorrent credentials to deploy **XMRig**. Talos also documented AI-enabled scam and cryptocurrency theft activity, including a russophone scam chatbot, a hispanophone actor using an autonomous OpenClaw-based agent called **Alex** to target Telegram Mini Apps and **TON** wallets, and autonomous offensive frameworks such as **Hephaestus**; the firm warned that AI is lowering barriers for novice attackers while enabling more capable operators to scale intrusion, fraud, and exploitation pipelines faster.
Aug 11, 2026