According to Check Point Software Technologies’ *Global Threat Index* for September 2024, cybercriminals are increasingly utilizing artificial intelligence (AI) to create more advanced and sophisticated malware. The report highlights a growing trend of AI-assisted malware development, with *AsyncRAT* making its way into the top 10 most prevalent malware threats.
Key Findings:
AI-Generated Malware: Researchers identified signs of AI involvement in the development of a script used to deliver *AsyncRAT* malware. The technique involved HTML smuggling, where a password-protected ZIP file containing malicious VBScript code was used to initiate an infection on the victim’s device. The well-structured and annotated code suggests that AI played a role in its creation.
Prevalence of AsyncRAT: The AI-enhanced *AsyncRAT* ranked 10th among the most common malware variants, indicating the growing use of artificial intelligence in streamlining malware development.
Commentary from Experts:
Maya Horowitz, VP of Research at Check Point Software, stated, “The fact that threat actors have started utilizing generative AI as part of their attack infrastructure highlights the continuous evolution of cyber-attack tactics.” This development is seen as a significant shift in the cybersecurity landscape, as AI is being leveraged to reduce the technical barriers for creating advanced threats.
Other Notable Malware Trends:
Top Threats: *FakeUpdates* emerged as the most prevalent malware in September, affecting 7% of organizations globally. *Androxgh0st* and *Formbook* were also significant, impacting 6% and 4% of global organizations, respectively.
Mobile and Ransomware Threats: The notorious *Joker* malware remained the top mobile threat, while *RansomHub* continued to lead the pack among ransomware groups.
Targeted Industries:
Education and Research: This sector was the most targeted globally, highlighting its vulnerability to cyberattacks.
Other Sectors: Government, military, and healthcare organizations also faced significant risks from malware and ransomware attacks.
Implications of AI-Driven Malware
The rise of AI in malware development is a concerning trend, as it potentially lowers the barriers for cybercriminals with limited technical expertise to create complex and effective threats. This evolution in attack methods underscores the urgent need for organizations to implement robust cybersecurity measures and to provide comprehensive training for their teams to stay ahead of these advanced tactics.
Organizations must adopt proactive security strategies to defend against AI-enhanced cyber threats, ensuring they are prepared to counteract evolving malware techniques.
