A Sneaky Hacking Tool Targeting AI Infrastructure Is Lurking in Victims’ Blind Spots

A new type of malware has been discovered targeting AI coding systems used in software development. The worm operates in phases to steal access credentials, sensitive data, and cryptographic keys, while also containing a destructive capability to destroy files and block legitimate users from compromised infrastructure. The malware is particularly difficult to detect because its behavior mimics legitimate automation that organizations use to build code, and it includes time delays that make it harder to connect causes and effects. Security researchers emphasize that as AI development becomes more widespread, detecting this type of attack requires structural solutions and collaboration across the industry, since traditional security tools struggle to distinguish malicious activity from normal AI system operations.