Malware News Google Warns of AI‑Driven Adaptive Malware Rewriting Its Own Code

[Brownie2019]

Content source

https://gbhackers.com/ai-driven-adaptive-malware/

The cybersecurity landscape experienced a major shift in 2025 as threat actors transitioned from experimenting with artificial intelligence to fully integrating it into real-world cyber operations.
According to new insights from the Google Threat Intelligence Group (GTIG) and Mandiant, attackers are now deploying adaptive malware and autonomous AI agents that dynamically modify their behavior during attacks, significantly increasing the speed, scale, and complexity of cyber threats.
Early uses of generative AI in cybercrime largely focused on productivity improvements. Threat actors used large language models (LLMs) to draft phishing emails, translate messages, and assist with basic coding tasks.
However, researchers observed that by the end of 2025, attackers had moved far beyond these limited uses, incorporating AI directly into malware and attack infrastructure.

Full Story:

Google Warns of AI‑Driven Adaptive Malware Rewriting Its Own Code

The cybersecurity landscape experienced a major shift in 2025 as threat actors transitioned from experimenting with artificial intelligence to fully integrating it into real-world cyber operations.

gbhackers.com

 

[Halp2001]

Interesting report, @Brownie2019. Given this "liquid malware" described by Google, the key for us remains a layered defense strategy:

Malware that rewrites itself changes the game: we are no longer dealing with static threats, but with an enemy that mutates and learns in real-time. To stop it, we must place "hurdles" in its path:

• Execution Blocking (Hard_Configurator): If the malware tries to run using new or suspicious code, the system simply refuses to open the door.
• Cutting the virus's "phone line" (NextDNS): Almost all modern malware needs to connect to the internet to receive orders (C2). A solid DNS filter leaves it deaf and mute, preventing it from stealing your data.
• Armored Browsing (uBlock Origin / AdGuard): Use updated extensions (compatible with the new MV3 standard) to stop AI-driven deceptions before they even enter through your browser.

In short: AI makes malware smarter, but a multi-layered defense forces it to jump over ten hurdles instead of one. If it can't communicate or execute, it doesn't matter how "smart" it is.