A new AI-driven malware called “LAMEHUG” has emerged, raising concerns in the cybersecurity community. This malware, discovered by Ukraine’s Computer Emergency Response Team, utilizes artificial intelligence to generate malicious commands in real-time, enhancing the precision and potency of cyberattacks. The malware is distributed through deceptive emails containing a malicious .zip file, purportedly sent from compromised official accounts. Once executed, LAMEHUG collects system and network information and exfiltrates documents, particularly Microsoft Office and PDF files. The malware’s AI capabilities are powered by the Hugging Face API, allowing it to adapt its tactics dynamically. Although the creators of LAMEHUG remain unidentified, links to the Russian hacking group APT28, known for global cyber-espionage activities, have been suggested. This development signals an evolution in cyberattack methods, with AI enabling more adaptive and prolonged threats.
previous post