AI-Powered Malware - A Serious Cyber Security Threat

Uploaded on 2025-05-13 in TECHNOLOGY-Key Areas-Artificial Intelligence, NEWS-Cybersecurity News, FREE TO VIEW

Cyber criminals are using Artificial Intelligence (AI) to build sophisticated and hyper-targeted malware that is hard to detect with traditional cyber security. The integration of AI into malware development is becoming as a serious cyber security threat, which is now a new method of criminal hacking attacks.

Traditionally, AI was not widely associated with malware, but with the rise of generative AI tools, cyber criminals are increasingly exploiting this technology to enhance their attacks.

AI-powered cyber attacks are more sophisticated, harder to detect, and capable of by-passing traditional security measures. And despite organisations attempts to minimise hackers’ chances of using their tools for criminal purposes, AI can now be used in malware development in several ways.

AI can be used to search for exploitable vulnerabilities, and readily available tools like ChatGPT allow even inexperienced hackers to write malicious scripts. AI-powered malware can also adapt to its environment, changing its behaviour and code structure dynamically to evade detection.

According to a report by Cybernews detailing the use of AI by threat actors, one of the earliest groups to take advantage of AI capabilities for malware creation is CyberAv3ngers, an Iranian hacking group targeting critical infrastructure sectors such as water systems, energy, and manufacturing. This group uses AI to improve vulnerability research, automate malware debugging, and craft scripts that manipulate industrial control systems and programmable logic controllers.

Similarly, SweetSpecter, a Chinese state-backed group, leverages OpenAI services to develop AI-driven intelligence collection tools and malware capable of bypassing traditional detection mechanisms. The capability to evade security measures makes their malware particularly potent, allowing it to persist undetected in targeted networks.

The Forest Blizzard group, also known as APT28, has used AI to create convincing fake government documents for phishing campaigns. By analysing victim communication patterns, they craft targeted attacks that can harvest sensitive information with great precision.

These groups represent the growing use of AI in cyber attacks, a trend that is expanding amongst both well-organised and less technical hacker groups.

As AI technology continues to evolve, so will the sophistication of cyber threats. Security solutions will need to adapt to this new landscape to stay ahead of these advanced, AI-driven cyber attacks.

First and foremost, users and employees must be taught how to distinguish threats and act accordingly. Organisations need to be very careful about who has what permissions in their systems.

Ransomware defences need to be better than ever, and networks need to be segmented to prevent or at least complicate lateral movement for attackers.

Image: Sasha85ru

You Might Also Read:

Securing Valuable Data:

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.