3 Tačke
Članak

Hades malware uses fake nuke prompts to trick AI scanners

Hades malware campaign adds prompt-injection attacks that trigger AI safety failsafes, causing scanners to skip malicious payloads in Python and JavaScript packages.

3 Tačke
47 sekundi čitanja

The Hades malware campaign, targeting scientific and machine-learning development packages, has been upgraded with a novel evasion technique. Malicious JavaScript files include code comments that instruct AI bots to ignore safety guidelines and generate detailed descriptions of biological and nuclear weapons. This triggers the bots' safety failsafes, causing them to stop scanning the file before reaching the actual payload.

While this adversarial attack is not expected to be widely effective against properly configured scanners, it could fool cursory checks by developers or CI/CD pipelines. The campaign also uses split loading mechanisms, precompiled binaries, and delayed payload activation to evade detection. It now steals credentials from npm, PyPI, RubyGems, JFrog, Kubernetes, AWS, and AI developer tools. Over 140 malicious packages have been identified, including typo-squatting instances like "rsquests" instead of "requests."

Povezani članci

16-satni Xbox prekid blokirao i fizičke igre

Xbox prekid od 16 sati onemogućio je pokretanje igara na tri generacije konzola, uključujući disk verzije, zbog kvara servisa za licence.

45 sekundi čitanja

Flock kamere nestaju na očigled: građani i vlasti uzvraćaju udarac

Nezadovoljstvo Flock Safety ALPR kamerama raste širom SAD, a građani i lokalne vlasti preduzimaju mere poput pokrivanja uređaja kesama i skrivanja u znake.

43 sekunde čitanja

Izvinjenje direktora Flock Safetyja zbog nazivanja aktivista teroristima

Direktor Flock Safetyja izvinio se što je aktiviste za privatnost nazvao teroristima, nakon kritika i pritiska javnosti.

34 sekunde čitanja

Sve veći otpor Flock Safety kamerama u SAD

Javnost i aktivisti u SAD sve se više suprotstavljaju Flock Safety kamerama, koje optužuju za masovni nadzor, dok gradovi raskidaju ugovore, a vandali uništavaju opremu.

36 sekundi čitanja