Skip to main content
MalwarePublished Updated

A Slopoly start to AI-enhanced ransomware attacks

Source AlienVault OTX General

0

Description

IBM X-Force discovered a likely AI-generated malware named 'Slopoly' used in a ransomware attack by the Hive0163 group. This marks the beginning of AI adoption among cybercrime groups, potentially transforming the threat landscape. Slopoly, while relatively unsophisticated, demonstrates how easily threat actors can use AI to develop new malware quickly. The attack involved ClickFix social engineering, NodeSnake malware, and InterlockRAT, culminating in the deployment of Interlock ransomware. This incident highlights the growing trend of AI-generated and AI-integrated malware, which could lead to more ephemeral and difficult-to-attribute attacks, challenging traditional threat intelligence methods.

Indicators of compromise

Domains 34

  • plurfestivalgalaxy.com
  • baseline-include-priority-bar.trycloudflare.com
  • bits-promotions-turned-editions.trycloudflare.com
  • bridal-custody-private-bodies.trycloudflare.com
  • chronic-dividend-amendments-das.trycloudflare.com
  • cigarette-assumed-biotechnology-checklist.trycloudflare.com
  • coffee-lloyd-families-excluded.trycloudflare.com
  • communist-flying-provision-calendar.trycloudflare.com
  • corner-teacher-guam-characterization.trycloudflare.com
  • describe-absent-operational-seventh.trycloudflare.com

IP addresses 1

  • 94.156.181.89

Hashes 3

  • ee5b997a34653f79d8ab1f35403d1a38
  • 1cc39fefbbc98ef8d4960107b373efd0c6ed6005
  • 0884e5590bdf3763f8529453fbd24ee46a3a460bba4c2da5b0141f5ec6a35675

Community reviews

Loading reviews…