AgentBaiting Campaign Exploits AI Skills to Distribute SmartLoader Malware

The AgentBaiting campaign has emerged as a significant threat, utilizing 800 fake AI Skills and Model Context Protocol (MCP) servers to deliver SmartLoader malware. This operation leverages trusted GitHub projects and public capability catalogs to disguise malicious activities. The malware delivery method exploits the growing trust in AI integrations, turning them into vectors for cyberattacks. The campaign is notable for its scale, with 7,600 repositories involved in the operation. Affected systems include those relying on AI capabilities and MCP workflows. The current status of the campaign indicates ongoing exploitation, with no immediate resolution reported. Security professionals are advised to remain vigilant against this evolving threat.

Key Points: • AgentBaiting uses 800 fake AI Skills to deliver SmartLoader malware. • The operation exploits trusted GitHub projects and public AI registries. • 7,600 repositories are implicated in the malware distribution campaign.