Researchers at Google’s Threat Intelligence Group (GTIG) have discovered that hackers are creating malware that can harness the power of large language models (LLMs) to rewrite itself on the fly.
An experimental malware family dubbed PROMPTFLUX, identified by GTIG in a recent blog post, can rewrite its own code to avoid detection.
It’s an escalation that could make future malware far more difficult to detect, further highlighting growing cybersecurity concerns brought on by the advent and widespread adoption of generative AI.
Tools like PROMPTFLUX “dynamically generate malicious scripts, obfuscate their own code to evade detection, and leverage AI models to create malicious functions on demand, rather than hard-coding them into the malware,” GTIG wrote.
According to the tech giant, this new “just-in-time” approach “represents a significant step toward more autonomous and adaptive malware.”
PROMPTFLUX is a Trojan horse malware that interacts with Google’s Gemini AI model’s application programming interface (API) to learn how to modify itself to avoid detection on the fly.
“Further examination of PROMPTFLUX samples suggests this code family is currently in a development or testing phase since some incomplete features are commented out and a mechanism exists to limit the malware’s Gemini API calls,” the group wrote.
Fortunately, the exploit has yet to be observed infecting machines in the wild, as the “current state of this malware does not demonstrate an ability to compromise a victim network or device,” Google noted. “We have taken action to disable the assets associated with this activity.”
Nonetheless, GTIG noted that malware like PROMPTFLUX appears to be “associated with financially motivated actors.” The team warned of a maturing “underground marketplace for illicit AI tools,” which could lower the “barrier to entry for less sophisticated actors.”
The threat of adversaries leveraging AI tools is very real. According to Google, “State-sponsored actors from North Korea, Iran, and the People’s Republic of China” are already tinkering with the AI to enhance their operations.
In response to the threat, GTIG introduced a new conceptual framework aimed at securing AI systems.
While generative AI can be used to create almost impossible-to-detect malware, it can be used for good as well. For instance, Google recently introduced an AI agent, dubbed Big Sleep, which is designed to use AI to identify security vulnerabilities in software.
In other words, it’s AI being pitted against AI in a cybersecurity war that’s evolving rapidly.
LGBTQ+ people are significantly more likely to stopped, harassed, and even falsely accused by the police than non-LGBTQ+ people, according to a new study released by the Williams Institute. As a result, LGBTQ+ people are less likely to contact the police when they need support, the study notes.
“Participants in these studies have described being stopped for no reason, encountering hostile treatment when police discovered they were transgender, and having officers assume they were engaging in sex work or other illegal activities,” the report explains, detailing some of its qualitative research. “Participants in several studies shared that they have concerns related to their LGBTQ identity about contacting the police or that they avoid police in order to avoid negative interactions.”
The Williams Institute study analyzed 25 years of research on interactions between the LGBTQ+ community and police. The data came from surveys, incident reports, government investigations, qualitative research, court cases, and anecdotal reports.
The findings might not be astonishing to those familiar with LGBTQ+ history, most notably the police raids that led to the Stonewall Riots. While decades have passed since crimes explicitly targeted LGBTQ+ social behaviors, the report suggests that changes only run so deep and notes that it was only 2003 when the Supreme Court ruled sodomy laws as unconstitutional.
The Williams Institute study analyzed 25 years of research on interactions between the LGBTQ+ community and police. The data came from surveys, incident reports, government investigations, qualitative research, court cases, and anecdotal reports.
The findings might not be astonishing to those familiar with LGBTQ+ history, most notably the police raids that led to the Stonewall Riots. While decades have passed since crimes explicitly targeted LGBTQ+ social behaviors, the report suggests that changes only run so deep and notes that it was only 2003 when the Supreme Court ruled sodomy laws as unconstitutional.
Just as the censorious Hays Code from the 1930s to ’60s still defines aspects of modern media, past criminalization of LGBTQ+ identities has created an environment where discrimination and harassment are common.
“The history of criminalization and related tensions between law enforcement and LGBTQ communities have legacies that extend to the present day,” the report acknowledges. The authors also note the new waves of anti-trans laws, pointing to the fact that “Recent years have seen a rise in anti-LGBTQ legislation, with many of these new laws imposing criminal penalties.”
The analysis of survey data revealed that as well as being more likely to be stopped, searched, arrested, and held in custody, LGBTQ+ people were also more likely to report verbal, physical, and sexual harassment and assault at the hands of law enforcement.
The study’s lead author, Joshua Arrayales, a law fellow at the Williams Institute, released a statement noting that all of this meant that LGBTQ+ people were less likely to report crimes, and that affects future data.
“Reporting crimes is essential for accurate crime statistics, proper allocation of crime prevention resources, and support services that address the unique needs of LGBTQ survivors,” Arrayales said.
As previous data already suggested that LGBTQ+ people are more likely to be crime victims, this research supports the idea that many crimes against queer people go unreported.
While LGBTQ+ people are more likely to be stopped by police, face harassment, and avoid contacting law enforcement as a result, the statistical differences grow for specific groups. People who are part of other marginalized groups reported higher incidence rates; one study showed that 46% of trans people said they’d avoid contacting the police if they were the victim of a crime.
The study also found that these interactions often had a lasting impact. A “growing body of research” suggests that there are “associations between police violence and harassment and binge drinking, stress, depression, and other negative health outcomes.”
The Williams Institute study also provides action items for improving the current situation: “(1) legal and policy reform, (2) enhanced accountability and representation within law enforcement agencies, (3) community engagement and support, and (4) continuous data collection and evaluation of these initiatives.”
Subscribe to the LGBTQ Nation newsletter and be the first to know about the latest headlines shaping LGBTQ+ communities worldwide.
This was an entirely illegal strike on people in distress who were no longer considered combatants in any way. This is a war crime ordered by Drunken Christian White Nationalist low ranking when got out of the military now head of the Department Of Defense. Hugs
Shutterstock
Scottie's Playtime 