Researchers say credential-stealing campaign used AI to build evasion ‘at every stage’

DeepLoad is an AI-enhanced credential-stealing malware campaign deployed via "QuickFix" social-engineering lures (fake browser prompts/error pages). The loader uses heavy AI-generated code obfuscation, runs under overlooked processes (Windows lock screen), performs real-time keylogging, spreads to connected USB drives, and can re-establish persistence after cleanup; researchers warn traditional file-signature defenses are likely to fail and recommend behavioral/runtime detection.