MalwarePublished 25 Sep 2025

Prompts as Code & Embedded Keys | The Hunt for LLM-Enabled Malware

Source AlienVault OTX General

Description

This research explores the challenges posed by LLM-enabled malware, which can generate malicious logic at runtime. The study identifies characteristics of such malware, including embedded API keys and specific prompt structures. Notable cases like PromptLock and APT28's LameHug are examined. The researchers developed hunting strategies based on API key detection and prompt analysis, leading to the discovery of new samples, including 'MalTerminal'. The implications for defenders are discussed, highlighting both the adaptability and potential brittleness of LLM-enabled malware. The research also uncovered various offensive tools leveraging LLMs for operational capabilities.

Impact

For European organizations, the impact of LLM-enabled malware could be significant due to the advanced adaptability and stealth of such threats. The dynamic generation of malicious logic at runtime complicates detection, increasing the risk of prolonged undetected intrusions. The embedding of API keys and reliance on external LLM services could enable attackers to tailor attacks specifically to targeted environments, potentially leading to data exfiltration, ransomware deployment, or operational disruption. Critical infrastructure, government agencies, and enterprises with sensitive data are at heightened risk, as adversaries like APT28 have historically targeted such entities in Europe. The use of encrypted channels and obfuscation techniques further complicates incident response and forensic analysis. Additionally, the novelty of this malware type means existing security tools may lack signatures or heuristics to detect it effectively, increasing the likelihood of successful compromise. The operational capabilities demonstrated by tools like MalTerminal suggest attackers can automate complex attack sequences, increasing attack speed and scale. Overall, European organizations face a medium to high risk from this evolving threat, especially those in sectors with strategic importance or high-value data.

Defensive guidance

Mitigation should focus on advanced threat hunting and detection strategies tailored to LLM-enabled malware characteristics. Organizations should implement monitoring for unusual API key usage within their environments, including scanning for embedded keys in code repositories, binaries, and network traffic. Behavioral analysis tools should be enhanced to detect dynamic code generation and execution patterns indicative of prompt-driven malware. Endpoint detection and response (EDR) solutions must be tuned to identify suspicious scripting activity and obfuscation techniques aligned with MITRE ATT&CK tactics noted in this threat. Network monitoring should include inspection of application layer protocols for anomalous encrypted communications potentially linked to LLM API interactions. Security teams should develop and deploy custom detection rules focusing on prompt structures and API key patterns, leveraging threat intelligence feeds such as those from AlienVault and SentinelOne. Regular threat hunting exercises using these indicators can help identify early-stage infections. Additionally, organizations should enforce strict access controls and secrets management to prevent leakage of API keys and credentials. Employee awareness programs should highlight the risks of novel malware leveraging AI technologies. Finally, collaboration with industry peers and sharing of indicators of compromise (IOCs) will enhance collective defense against this emerging threat.

Indicators of compromise

Hashes 69

1854a4427eef0f74d16ad555617775ff
2fdffdf0b099cc195316a85636e9636d
3ca2eaf204611f3314d802c8b794ae2c
636e13c7b4c334503e313d82d9f7e5a1
74eb831b26a21d954261658c72145128
7f7e8d9bbb835f03084d088d5bb722af
806f552041f211a35e434112a0165568
81cd20319c8f0b2ce499f9253ce0a6a8
abe531e9f1e642c47260fac40dc41f59
ac377e26c24f50b4d9aaa933d788c18c

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 25 Sep 2025, 14:12 UTC

MITRE ATT&CK techniques8 from threat tags

Technical details

Indicators of compromise

Hashes 69

Community reviews

Related threats