AI-powered malware emerges as new threat in cybersecurity landscape

Cybercriminals are increasingly leveraging artificial intelligence (AI) to create sophisticated malware, according to Check Point Software Technologies' Global Threat Index for September 2024. The report reveals a growing trend of AI-assisted malware development , with AsyncRAT ranking 10th among the most prevalent malware.


Researchers discovered that threat actors likely used AI to develop a script delivering AsyncRAT malware through HTML smuggling. This method involves sending a password-protected ZIP file containing malicious VBScript code to initiate an infection chain on the victim's device. The well-structured and commented code suggested AI involvement in its creation.


Maya Horowitz, VP of Research at Check Point Software, emphasised the significance of this development, stating, "The fact that threat actors have started utilising generative AI as part of their attack infrastructure highlights the continuous evolution of cyber-attack tactics."


The report also identified FakeUpdates as the most prevalent malware in September, impacting 7% of organisations worldwide. Androxgh0st and Formbook followed, affecting 6% and 4% of global organisations, respectively.


In the mobile sphere, Joker remained the top threat, while RansomHub continued to lead among ransomware groups. The education and research sector was the most targeted industry globally, followed by government/military and healthcare.


The emergence of AI-driven malware development is particularly concerning as it potentially lowers the barrier for cybercriminals with limited technical skills to create sophisticated threats. This trend underscores the need for organisations to implement proactive security strategies and comprehensive training for their teams.