A Slopoly start to AI-enhanced ransomware attacks
Source AlienVault OTX General
0
Description
IBM X-Force discovered a likely AI-generated malware named 'Slopoly' used in a ransomware attack by the Hive0163 group. This marks the beginning of AI adoption among cybercrime groups, potentially transforming the threat landscape. Slopoly, while relatively unsophisticated, demonstrates how easily threat actors can use AI to develop new malware quickly. The attack involved ClickFix social engineering, NodeSnake malware, and InterlockRAT, culminating in the deployment of Interlock ransomware. This incident highlights the growing trend of AI-generated and AI-integrated malware, which could lead to more ephemeral and difficult-to-attribute attacks, challenging traditional threat intelligence methods.
Indicators of compromise
Domains 34
- plurfestivalgalaxy.com
- baseline-include-priority-bar.trycloudflare.com
- bits-promotions-turned-editions.trycloudflare.com
- bridal-custody-private-bodies.trycloudflare.com
- chronic-dividend-amendments-das.trycloudflare.com
- cigarette-assumed-biotechnology-checklist.trycloudflare.com
- coffee-lloyd-families-excluded.trycloudflare.com
- communist-flying-provision-calendar.trycloudflare.com
- corner-teacher-guam-characterization.trycloudflare.com
- describe-absent-operational-seventh.trycloudflare.com
IP addresses 1
- 94.156.181.89
Hashes 3
Community reviews
Loading reviews…