Vibe coded threats shift again — hackers are using AI chatbots to write malware using natural language

Vibe coded threats shift again — hackers are using AI chatbots to write malware using natural language

Huntress analyzed AI‑generated malware “Untitled1.ps1,” a noisy custom AD enumeration tool likely built by low‑skilled attackers using generative AIAttackers paired it with s5cmd for rapid data exfiltration and SharpShares.exe for share enumeration before being detected and removedReport warns AI “vibe coding” lowers barriers for cybercrime, producing unique payloads that evade signature‑based defenses, requiring behavioral analytics to catch at…

Attacker Used AI to Build Custom PowerShell Recon Malware

Attacker Used AI to Build Custom PowerShell Recon MalwareHuntre

AI-Generated PowerShell Script Helps Threat Actor Accelerate Active Directory Reconnaissance

Artificial intelligence is increasingly becoming an operational advantage for cybercriminals, and a newly documented intrusion demonstrates how attackers are using AI-generated code to speed up familiar attack techniques rather than invent new ones.Researchers at Huntress uncovered an intrusion in which an unidentified threat actor deployed what appears to be a large language model-generated PowerShell script to perform extensive Active Director…

Hackers Using Vibe-Coded Generated PowerShell Script to Enumerate Active Directory Accounts

Threat actors have started weaponizing AI-generated PowerShell code to map Active Directory (AD) environments, marking a notable shift from off-the-shelf hacking tools to bespoke, “vibe-coded” malware. Security researchers at Huntress recovered and reconstructed one such script, dubbed Untitled1.ps1, from an incident on June 3, 2026. Vibe coding refers to writing software by iteratively prompting an AI with natural language rather than manually …

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-coded PowerShell script for Active Directory (AD) enumeration. "The script looked for the Domain Controller (DC) and mapped users, computers, and domains, before creating a directory and exporting out a number of files, and finally creating AD_Report.html to measure the success of the