AI-Generated Malware Deployed in Escalating Cyber War

State-sponsored hackers are now using artificial intelligence to create malware, marking a significant escalation in their cyber operations against a specific nation, according to a new government report. The report, which documented over 3,000 incidents in the first half of 2025, highlights that AI is being used not just for phishing but for generating malicious code itself, such as the WRECKSTEEL data-stealing malware. As the target's cyber defenses improve, attackers are shifting tactics to include zero-click exploits in webmail software and short-term "Steal & Go" data theft operations. These threat actors also continue to engage in hybrid warfare, synchronizing their cyberattacks with kinetic military actions to maximize disruption. Furthermore, attackers are increasingly abusing legitimate cloud services for hosting malware and exfiltrating stolen data, adapting their methods to bypass security measures.

Latest mentioned: 10-09

Earliest mentioned: 10-09

Sources

thehackernews.com therecord.media cybersum.net

Also Read

Airstalk Malware: Sophisticated Windows Threat Exploits MDM

Cybersecurity researchers have uncovered Airstalk, a sophisticated Windows malware family available in PowerShell and .NET variants. The malware, linked to a nation-state threat actor, uses legitimate mobile device management infrastructure for covert command-and-control communications. It targets sensitive browser credentials and employs advanced evasion techniques, including the use of a likely stolen certificate. The malware's sophisticated design suggests a well-resourced adversary with advanced capabilities. Organizations utilizing business process outsourcing services are particularly at risk due to the malware's supply chain attack vector.

10-31Read more →