GenAI Writes Malicious Code to Spread AsyncRAT

Researchers from HP Wolf Security identified an email-based campaign employing generative AI to craft VBScript and JavaScript used to deploy the AsyncRAT remote access trojan; the attack used an AES-encrypted HTML attachment that led to a script chain (registry persistence, PowerShell injection, and process injection) to execute the payload. The findings show attackers are leveraging GenAI to lower the bar for creating effective malware and highlight the need for defenders to adopt AI-driven detection and pattern analysis to counter these evolving TTPs.