MALWARE EVOLVES: ATTACKERS WEAPONIZE AI SKILLS

ESET's analysis reveals attackers are rapidly adapting established techniques to leverage AI platforms and capitalize on shifting user behavior. Key findings include the emergence of malicious AI skills—techniques leveraging AI tools for nefarious purposes—and AI-assisted malware that enhances attack sophistication. ClickFix attacks, which manipulate users into disabling security software, saw significant growth. Quishing activity—QR code-based phishing—hit record levels as criminals exploit the trusted nature of mobile scanning. Ransomware developers are focusing on tools specifically designed to neutralize security software, creating a more dangerous threat landscape. The convergence of AI capabilities, social engineering tactics, and purpose-built malware reflects attackers' commitment to evading defenses and maximizing impact. The findings underscore the need for organizations to strengthen security postures against evolving threats that combine human manipulation with machine-assisted sophistication.