Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://someone.elses.computer/users/mikarv/statuses/113719958270426873">Michael Veale (mikarv@someone.elses.computer)'s status on Friday, 27-Dec-2024 02:38:52 JST</a><a href="https://someone.elses.computer/@mikarv" title="mikarv@someone.elses.computer"><img src="https://gnusocial.jp/avatar/14401-48-20230911222354.webp" width="48" height="48" alt="Michael Veale" style="position: absolute; left: 0; top: 0;">Michael Veale</a></section><article><p>Hewlett Packard report that they are spotting AI-generated malware in the wild, not through complex analysis or watermarking, but because… it is weirdly well-commented. <a href="https://threatresearch.ext.hp.com/wp-content/uploads/2024/09/HP_Wolf_Security_Threat_Insights_Report_September_2024.pdf" rel="nofollow noreferrer">https://threatresearch.ext.hp.com/wp-content/uploads/2024/09/HP_Wolf_Security_Threat_Insights_Report_September_2024.pdf</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/4259549#notice-8324376">In conversation</a><time datetime="2024-12-27T02:38:52+09:00" title="Friday, 27-Dec-2024 02:38:52 JST">about 5 months ago</time> <span>from <span><a href="https://someone.elses.computer/@mikarv/113719958270426873" rel="external" title="Sent from someone.elses.computer via ActivityPub">someone.elses.computer</a></span></span><a href="https://someone.elses.computer/@mikarv/113719958270426873">permalink</a><h4>Attachments</h4><ol><li><label><a rel="external" href="https://gnusocial.jp/attachment/3780697">Interestingly, when we analyzed the VBScript and the JavaScript, we were surprised to find that the code was not obfuscated. In fact, the attacker had left comments throughout the code, describing what each line does even for simple functions. Genuine code comments in malware are rare because attackers want to their make malware as difficult to understand as possible.  Based on the scripts’ structure, consistent comments for each function and the choice of function names and variables, we think it’s highly likely that the attacker used GenAI to develop these scripts (T1588.007). The activity shows how GenAI is accelerating attacks and lowering the bar for cybercriminals to infect endpoints.</a></label><br><a href="https://inside.someone.elses.computer/computer/media_attachments/files/113/719/958/167/321/319/original/7e11dd2831a7c3b4.jpeg" rel="external">https://inside.someone.elses.computer/computer/media_attachments/files/113/719/958/167/321/319/original/7e11dd2831a7c3b4.jpeg</a></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/3780698">Code with French language commentary for even simple functions, such as a sleep(5000) function annotated with ‘Pause pour permettre l'arrêt du processus’</a></label><br><a href="https://inside.someone.elses.computer/computer/media_attachments/files/113/719/958/238/476/591/original/b6a19dc1027a73cf.jpg" rel="external">https://inside.someone.elses.computer/computer/media_attachments/files/113/719/958/238/476/591/original/b6a19dc1027a73cf.jpg</a></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/3780699">Untitled attachment</a></label><br></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Michael Veale (mikarv@someone.elses.computer)'s status on Friday, 27-Dec-2024 02:38:52 JST Michael Veale
Hewlett Packard report that they are spotting AI-generated malware in the wild, not through complex analysis or watermarking, but because… it is weirdly well-commented. https://threatresearch.ext.hp.com/wp-content/uploads/2024/09/HP_Wolf_Security_Threat_Insights_Report_September_2024.pdf
In conversationabout 5 months ago from someone.elses.computerpermalink
Attachments

Public

Embed Notice

HTML Code

Corresponding Notice