MalwarePublished 31 Jul 2026

ESET tracks rise in malicious AI skills and adaptable malware

Source Bleeping Computer

Description

ESET's H1 2026 Threat Report highlights a rise in malicious use of AI skills and AI-assisted malware. Attackers are adapting established techniques to AI platforms and emerging technologies, including social engineering methods like ClickFix and increased QR code phishing (quishing). The report also notes ransomware tools designed to disable security software (EDR killers) remain prevalent. The use of AI in malware, such as the Android PromptSpy leveraging Google's Gemini, illustrates growing flexibility in threats. Overall, attackers are scaling campaigns by combining AI, social engineering, and ransomware innovations.

Impact

The integration of AI into malware and attack techniques increases the adaptability and scalability of cyber threats, potentially making detection and prevention more challenging. The rise of AI-assisted malware like PromptSpy can evade traditional static defenses by dynamically adapting to environments. Expanded social engineering tactics and increased quishing attacks raise the risk of successful user-targeted compromises. Continued use of EDR killers in ransomware attacks threatens endpoint security by disabling protective software. However, a decline in ransom payments may reduce attacker incentives and impact.

Defensive guidance

No specific patch or official fix is applicable as this is a broad trend rather than a single vulnerability. Organizations should remain aware of evolving AI-assisted threats and social engineering tactics described by ESET. Monitoring for suspicious AI skill usage and emerging malware variants is advised. Since ransomware with EDR killers remains active, maintaining updated endpoint detection and response capabilities and applying best practices for ransomware defense remain important. Check ESET's official threat report for detailed guidance and updates.

Summary

In the first half of 2026, attackers have increasingly integrated AI into their operations, adapting existing attack methods to new platforms and user behaviors. ESET analyzed nearly 900,000 AI skills, identifying thousands of malicious instances, indicating rapid growth of this attack surface. AI-assisted malware like PromptSpy uses generative AI to dynamically interpret user interfaces and adapt across devices. Social engineering techniques such as ClickFix have evolved beyond fake CAPTCHAs to AI-themed help pages and cloud authentication scams. QR code phishing has surged, exploiting user trust in QR codes. Ransomware activity continues with frequent use of EDR killers to disable security software. Despite these advances, fewer victims are paying ransoms, suggesting some mitigation progress.

References

bleepingcomputer.com/news/security/eset-tracks-rise-in-malicious-ai-skills-and-adaptable-malware/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 2 Aug 2026, 00:01 UTC

References

Community reviews