In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years

The PoeLLM malware, active since at least April 2026, targets exposed AI and open-source services such as LiteLLM, Ollama, Gotenberg, and Gitea to mine cryptocurrency and expand its botnet. It uniquely encodes its command-and-control server IP address using four keywords extracted from a poem hosted on GitHub, allowing dynamic server switching. The operator is assessed to be Italian-speaking. The Tensorlake npm SDK version 0.5.144 was compromised in a supply chain attack delivering a credential-stealing worm that harvests credentials from npm, GitHub, AWS, Kubernetes, Vault, and AI coding tools. Nvidia's DCGM Exporter had a denial-of-service vulnerability (CVE-2026-47483) allowing unauthenticated attackers to exhaust resources and crash the service; this has been patched in version 4.8.2. South Korean authorities are investigating recent bank breaches where AI tools were reportedly used, with CrowdStrike attributing the attacks with moderate confidence to a Chinese-speaking financially motivated threat actor. Raheim Hamilton, co-founder of the Empire Market dark web marketplace, was sentenced to 40 years in prison for drug conspiracy and related charges.

The PoeLLM botnet can compromise AI and open-source service infrastructure to mine cryptocurrency and expand its network, potentially degrading service availability and security. The Tensorlake npm SDK compromise risks widespread credential theft across multiple cloud and development platforms, enabling further attacks. Nvidia's DCGM Exporter vulnerability could disrupt GPU monitoring and AI workloads, impacting performance and reliability. The South Korean bank breaches resulted in customer personal information exposure, with AI tools suspected to have facilitated the attacks, raising concerns about AI-assisted cybercrime. The Empire Market sentencing disrupts a major dark web marketplace involved in drug trafficking, stolen credentials, counterfeit currency, and hacking tools sales.

Nvidia users should update the DCGM Exporter to version 4.8.2 or later to address the denial-of-service vulnerability. Users of the Tensorlake npm SDK should audit and update to a clean, uncompromised version and review credentials potentially exposed by the supply chain attack. Organizations running AI and open-source services targeted by PoeLLM should monitor for unusual mining activity and consider network segmentation and access controls. South Korean banks and other financial institutions should follow guidance from their authorities regarding the ongoing investigation and enhance monitoring for AI-assisted attack techniques. Law enforcement actions against dark web marketplaces like Empire Market continue to disrupt illicit activities.