Attackers Are Learning to Live Off the AI Toolchain

Malware is being developed to exploit trusted AI tools and workflows, allowing malicious activity to blend in with normal activity. An example of this is Sandworm_Mode, which demonstrates how attackers can use AI toolchains to their advantage. This approach makes it challenging to distinguish between legitimate and malicious actions. Attackers are leveraging AI tools to carry out their activities in a more stealthy manner. This tactic enables them to remain under the radar for longer periods. The use of AI toolchains by attackers is a notable evolution in their methods.