Malware developers added nuclear and biological weapons text to to their spyware
Summary
Malware developers are embedding references to nuclear and biological weapons in spyware to trigger LLM safety refusals, evading AI-powered security scanners. This highlights a second-order blindspot in AI safety alignment that attackers are starting to exploit.
View Cached Full Text
Cached at: 06/12/26, 05:55 PM
NEW: malware developers added nuclear & biological weapons text to to their spyware.
Goal? To trigger LLM safety refusals… so that their spyware wouldn’t be analyzed by an AI security scanner.
Cleanest practical example I can think of for why over-indexing on first order safety alignment is risky.
When closed (and open) models ship with aggressive refusals, they will be sprinkled with second-order blindspots that attackers will discover…and exploit.
We are only in the earliest days of attackers leveraging these features, and it wouldn’t surprise me if users systems that need to handle complex cybersecurity issues demand that models be less safety-blunted.
In the weeds: @SocketSecurity’s post also shows why intention matters in how you design a malware analysis pipeline to avoid prompt manipulation.
H/T to colleagues that shared this with me https://socket.dev/blog/mini-shai-hulud-miasma-and-hades-worms-target-bioinformatics-and-mcp-developers-via-malicious…
Similar Articles
@jsrailton: NEW: malware developers added nuclear & biological weapons text to to their spyware. Goal? To trigger LLM safety refusa…
Malware developers are adding text about nuclear and biological weapons to their spyware to trigger LLM safety refusals, preventing AI security scanners from analyzing the malware. This demonstrates a practical exploit of aggressive safety alignment, highlighting second-order blindspots that attackers can leverage.
New attack provides one more reason why AI browsers are a bad idea
A new attack called 'BioShocking' exploits AI browsers by creating an alternate reality where guardrails are bypassed, potentially allowing credential theft. The technique works on multiple AI browsers, highlighting security risks of merging browser and AI agent functions.
Unit 42 found 5 malicious skills that passed ClawScan + VirusTotal
Unit 42 discovered five malicious AI agent skills that evaded detection by ClawScan and VirusTotal, including referral-hijacking, crypto wallet draining, and a dropper hidden via size padding, demonstrating that signature scanning is ineffective against instruction-based threats.
A Sneaky Hacking Tool Targeting AI Infrastructure Is Lurking in Victims’ Blind Spots
CrowdStrike has discovered a worm that targets AI software supply chains, stealing credentials and performing destructive actions while evading detection by mimicking legitimate AI coding activities.
Document-borne AI worms can self-propagate through Copilot for Word
This article demonstrates a novel AI worm that can self-propagate through Microsoft's Copilot for Word by embedding hidden instructions in documents, causing Copilot to copy those instructions into new documents. The vulnerability was disclosed to Microsoft's Security Response Center.