Darkreading AI Tools Enable Easy Reverse Engineering of Slack and Malware
Article Content
- •AI can reverse-engineer software like Slack and Finder, raising IP theft risks.
- •Intezer added new features to Slack using AI-rebuilt source code.
- •Obfuscation and encryption are recommended to protect software from AI tools.
Researchers from Intezer demonstrated that AI can effectively reverse-engineer complex software, including Slack and Apple's Finder app, as well as a variant of the Turla malware. Using AI agents, they rebuilt the source code from binaries, allowing them to add features like AI text autocomplete to Slack. The process involved creating a harness to manage AI models and tools, resulting in a high degree of similarity between the original and reconstructed code. Intezer's tests revealed that the rebuilt applications maintained functionality and were comparable to human-written code. This research raises concerns for software vendors relying on binary distribution for code protection, as it exposes their applications to potential IP theft and security risks. The study highlights the need for enhanced obfuscation techniques to protect proprietary software from AI-driven reverse engineering.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track Midnight Blizzard, TinyTurla and Apple in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What applications were reverse-engineered?
What are the implications of this research?
What defenses are recommended?
Continue Reading
APT29 Targets Mobile Users with Watering Hole Campaign APT29, a Russian state-sponsored hacking group, is behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites and fake domains. The campaign, identified by Sekoia in mid-October 2026, employs multiple infection vectors, including JavaScript injection on legitimate sites…
CISA Adds Apple Vulnerability to Exploited List Amid Active Exploitation Reports On November 4, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2024-27834, a medium-severity vulnerability (CVSS 5.5) affecting multiple Apple products, to its Known Exploited Vulnerabilities catalog. This flaw, which allows attackers with arbitrary read and write capabilities to…