malware analysis

Jun 26, 2026 4 min read

Gaslight: North Korean Backdoor Poisons AI Malware Analysis Tools

SentinelLabs discovered a Rust-based macOS backdoor attributed to North Korea that embeds 38 fake system messages designed to trick AI-assisted malware triage into aborting or refusing analysis.

img of PROMPTSTEAL: How APT28 Used an LLM to Generate Attack Commands

Jun 25, 2026 6 min read

Threat Actors

PROMPTSTEAL: How APT28 Used an LLM to Generate Attack Commands

APT28's PROMPTSTEAL malware queries an LLM via the Hugging Face API to dynamically generate Windows recon commands, marking the first confirmed use of LLM-driven malware in live operations against real targets.