AI-bolit Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
November 13, 2025
Last Seen
November 18, 2025

AI-bolit is a Linux-targeted malware family that provides persistent backdoor capabilities on compromised servers, often linked to web-hosting environments and PHP backdoors.

Overview

AI-bolit is a Linux-targeted malware family that provides persistent backdoor capabilities on compromised servers, often linked to web-hosting environments and PHP backdoors. Its significance lies in its historical prevalence on Linux web infrastructure and its use in broad server compromises, with current discourse framed around defense via AI-powered tools (Imunify AI) and the risk surface created by vulnerabilities in security products (ImunifyAV).

Related Threat Clusters

Recent Intelligence Reports

  • Imunify AI — Gbhackers · November 18, 2025
  • RCE flaw in ImunifyAV puts millions of Linux — Bleepingcomputer · November 13, 2025

CVSS v3.1 Breakdown