Novel malware from Russia’s APT28 prompts LLMs to create malicious Windows commands

Russian cyberespionage group APT28 has developed malware that generates commands by querying large language models (LLMs). The malware, dubbed LAMEHUG by the Ukrainian CERT, was used in recent spear phishing attacks against Ukrainian government entities and represents a new example of how attackers are using AI in their attacks . The phishing emails were sent from a compromised email account and impersonated a representative of an Ukrainian ministry, according to the CERT-UA report . The malware...