Malware uses LLMs to rank victims by how much they're worth

Re:Malware uses LLMs to rank victims by how much they're worth by ransom1538 on Saturday October 31, 2026 @01:54PM (#50318331)

Phase 0: breakins to all (php/python/etc,)

Phase 1: the closure, companies close down sites, all banks down

Phase 2: the reopen- but to only the correct* sites

Phase 3: the viruses

Phase 4: the re-shutdown

Phase 5: use of physical currency / fax machines only.

We are just getting to Phase 0. By end of 2026 most things will be broken into. By 2027 most banks will be offline.

[ Parent | on HN ]

Re:Malware uses LLMs to rank victims by how much they're worth by bearjaws on Saturday October 31, 2026 @02:47PM (#50318831)

I work in security and while things are grim, it's not even close to this.

[ Parent | on HN ]

Re:Malware uses LLMs to rank victims by how much they're worth by prox on Saturday October 31, 2026 @03:51PM (#50319457)

Whats your perspective? Front end dev here.

[ Parent | on HN ]

Re:Malware uses LLMs to rank victims by how much they're worth by bearjaws on Saturday October 31, 2026 @04:13PM (#50319674)

Bot's enable discovery of information or exploits at a scale that we cannot imagine.

Recent example of a breach, they are now using AI to decomp APKs and iOS apps, mainly old builds of apps that nobody would bother spending the time on previously to look for secret keys or accidental information disclosure.

This would have been immensely time consuming with each app usually doing things a bit differently (e.g. encrypted + compiled settings, keys in database, settings in a settings.json).

Now you can automate the entire pipeline, this is actively being used to look for legacy API endpoints that may not be hardened or monitored, or if you don't rotate your keys and at one point disclosed them.

[ Parent | on HN ]

Re:Malware uses LLMs to rank victims by how much they're worth by prox on Saturday October 31, 2026 @05:27PM (#50320406)

Dang, that’s tough. Recently having to deal with php2shell was a good wake-up call for anybody doing hosting of any kind. Next few years gonna be rough (but food on the table for cybersecurity experts I guess)

[ Parent | on HN ]

Re:Malware uses LLMs to rank victims by how much they're worth by ftchd on Saturday October 31, 2026 @02:18PM (#50318545)

I'm not on the optimistic side regarding AI but I just don't see this happening.

[ Parent | on HN ]