TAG
#malware
Stories connected through a shared idea, actor, technology or theme.
Anthropic warns small AI models may soon self-replicate across IoT devicesAnthropic said models below 30 billion parameters could complete many individual steps needed for replication, while GLM-5.2 and stronger systems completed end-to-end replication in simplified, firewalled tests. The company warned that autonomous replication could become possible by the end of 2026 if capability trends continue.→Microsoft details TerminalFix campaign that turns fake CAPTCHA prompts into reverse tunnelsMicrosoft Threat Intelligence said TerminalFix tricks users into pasting a PowerShell command, then uses DLL sideloading, steganographic payloads, persistence and Active Directory reconnaissance. The chain ends with a Python-based encrypted WebSocket tunnel that can proxy arbitrary TCP traffic through the compromised host; Microsoft did not observe the later-stage actions in the analysed chain.→Ars Technica reports a new web-based supply-chain risk for coding agentsArs Technica reported 227 installation commands across more than 100 websites that pointed to unowned executable content in files such as llms.txt and llms-full.txt. The report said Claude, Codex and Hermes agents installed the code, exposing a new route from web documentation to developer workstations and corporate networks.→Unit 42 finds AI speeds malware development more than evasionPalo Alto Networks’ Unit 42 analysed 405 malware samples linked to AI and found that roughly 97% stayed in sandboxes, research repositories or internal testing, while only 12 reached live endpoints. All 12 triggered security alerts, leading researchers to conclude that AI is currently shortening malware development cycles more than it is making malware harder to detect.→ChainDrop targets npm users through developer-tool configurationThe Register reports that ChainDrop poisoned 444 npm packages and can activate through configuration used by environments such as VS Code and Claude Code. The campaign is designed to harvest npm tokens, cloud credentials, and other secrets, while dependency scanning may not detect the configuration-based payload.→ChainDrop exposes persistence through Claude Code and VS Code configurationMicrosoft’s analysis describes more than 400 affected packages, a malicious preinstall payload, credential theft from developer and CI environments, and automated republishing through stolen npm access. The malware can also use GitHub credentials to inject Claude and Visual Studio Code configuration files into repositories, creating another path between compromised projects and developers.→