A new malware strain dubbed Slopoly, likely created using generative AI tools, allowed a threat actor to remain on a compromised server for more than a week and steal data in an Interlock ransomware attack.

Once inside a system, threat actors deploy Slopoly as a PowerShell script, functioning as a client for a command-and-control (C2) framework.

The Hive0163 group used AI-assisted malware called Slopoly to maintain persistent access in ransomware attacks.

AI-generated Slopoly malware used by Hive0163 in 2026 attacks maintained access for over a week, highlighting how AI accelerates malware development.

A new malware strain dubbed Slopoly, likely created using generative AI tools, allowed a threat actor to remain on a compromised server for more than a week and steal data in an Interlock ransomware attack.

A new malware strain dubbed Slopoly, likely created using generative AI tools, allowed a threat actor to remain on a compromised server for more than a week and steal data in an Interlock ransomware attack. [...]

📌 A security flaw in **n8n**, an open-source workflow automation tool, has been exploited in attacks, though specific technical details or CVE identifiers were not provided. **Slopoly**, a newly identified malware strain, was reported, though its functionality and impact remain unspecified. **Interpol** conducted a cybercrime crackdown, though no further details on targets, arrests, or affected regions were disclosed. Additionally, **Telus Digital** experienced a data breach, while vulnerabilities in **Linux AppArmor** were found to allow privilege escalation to root. A **U.S. defense contractor** was linked to the exploitation of **Coruna** vulnerabilities, though no additional context was given. No dates or specific attack vectors were mentioned in the reported incidents.

Introduction: In a significant escalation of artificial intelligence (AI) misuse, IBM security researchers have uncovered "Slopoly," a likely AI-generated malware framework linked to the notorious Hive0163 ransomware group. This discovery marks a pivotal shift from theoretical AI threats to tangible tooling, demonstrating how financially motivated threat actors are now leveraging Large Language Models (LLMs) to rapidly develop custom command-and-control (C2) clients.

A new malware strain dubbed Slopoly, likely created using generative AI tools, allowed a threat actor to remain on a compromised server for more than a week and steal data in an Interlock ransomware a...

Greetings from AllSafeUs Research Labs. As Senior Lead Security Analyst, I'm bringing you an urgent digest of recent cybersecurity developments that demand our attention. The threat landscape continues its rapid evolution, marked by critical software vulnerabilities, the emergence of new malware, and significant movements on the global cybercrime front. This analysis unpacks the technical intricacies of these incidents and provides actionable insights for robust defense.

Adversaries are increasingly walking in through the front door – 3.3 billion stolen credentials and cloud tokens prove it. This week also brings likely AI-authored malware, compromised browser extensions, 14,000 infected routers powering a shadow proxy network, and regulatory movement on both consumer privacy and AI data practices.