Hackers are increasingly turning to generative artificial intelligence (AI) technology to craft sophisticated malware and phishing attacks targeting individuals and organizations alike. A recent discovery of a malware campaign by HP Wolf Security involved the AsyncRAT malware delivered through AI-generated code. The attackers used HTML smuggling techniques to deliver password-protected ZIP archives, which, once cracked, unleashed scripts establishing persistence on infected machines. The organized structure and explanatory comments in the code resembled outputs of generative AI. Researchers noted that generative AI allows even less-skilled hackers to develop advanced malware quickly. The malware campaign also demonstrated how attackers used generative AI not only for writing code but also for speeding up their workflow in developing threats targeting different platforms. Additionally, archives were reported as the most common delivery method in the first half of 2024.

Ajina.Banker is a new strain of Android malware targeting bank customers in Central Asia. It harvests financial data and intercepts 2FA messages, primarily spreading via Telegram channels disguised as legitimate apps for banking, payments, and utilities. The malware has been active since November 2023.

Singapore Police arrested six men involved in a cybercrime ring linked to a global syndicate, following island-wide raids that uncovered illegal hacking tools, unauthorized data, and significant cash and cryptocurrency.

The Australian government deployed cyber specialists to assist the Pacific Islands Forum (PIF) in Fiji after its networks were infiltrated by Chinese state-backed hackers, likely before February 2024. The attack aimed to gather information about the PIF’s operations and communications. China denies involvement.