Cyberattackers integrate large language models (LLMs) into the malware, running prompts at runtime to evade detection and augment their code on demand.

The disclosure comes as HelixGuard discovered a malicious package in PyPI named "spellcheckers" that claims to be a tool for ...

A Russian-linked campaign delivers the StealC V2 information stealer malware through malicious Blender files uploaded to 3D ...

Malicious CGTrader .blend files abuse Blender Auto Run to install StealC V2, raiding browsers, plugins, and crypto wallets.

North Korean state-sponsored threat actors, part of the infamous Lazarus Group, have been seen hosting malware and other ...

WormGPT 4 sales began around September 27 with ads posted on Telegram and in underground forums like DarknetArmy, according ...

“Analysis of these two models confirms that attackers are actively using malicious LLMs in the threat landscape,” Unit 42 ...

A new WhatsApp malware targets Brazilian users, stealing banking and crypto data while spreading through hijacked contacts.

As in the wider world, AI is not quite living up to the hype in the cyber underground. But it's helping low-level cybercriminals do competent work.

The Russian state-sponsored group behind the RomCom malware family used the SocGholish loader for the first time to launch an attack on a U.S.-based civil engineering firm, continuing its targeting of ...