Hackers deploy AI-written malware in targeted attacks

HP Wolf Security researchers discovered a phishing campaign targeting French users that used HTML smuggling to deliver password-protected ZIP archives containing VBScript and JavaScript; after brute-forcing the archive, analysts found well-commented code consistent with AI-generated output and a follow-on download of AsyncRAT, a remote access malware capable of keystroke logging, encrypted remote control, and additional payload delivery. The malware established persistence via scheduled tasks and registry changes, and the report warns that generative AI is lowering the bar for lower-skilled actors to produce and customize malware.