The activity uses three previously undocumented malware families PATCHCORD, SHEETCORD, and HACKERAI C2 Agent and shows possible links to APT36, also known as Transparent Tribe. Researchers assess the attribution with moderate confidence. The assessment is based on the group’s targeting patterns, shared infrastructure, malware similarities, and tools found on an exposed staging server. The campaign […]
The post APT36-Linked HACKERAI Implant Shows Signs of LLM-Assisted Malware Development appeared first on Cyber Security News.