analiza aiqbench
This campaign exploits emerging AI infrastructure standards like MCP to disguise malware distribution within trusted developer ecosystems. By creating thousands of fake "AI Skills," attackers turn routine searches for legitimate integrations into high-risk vectors for SmartLoader infections. The incident highlights the critical need for rigorous verification protocols as AI tooling expands rapidly across public registries and GitHub repositories.
AgentBaiting Campaign Uses 800 Fake AI Skills and MCP Servers to Deliver SmartLoader Malware

Malware operators are increasingly using tools built to extend artificial intelligence as a delivery route. A newly documented campaign called AgentBaiting uses fraudulent AI Skills and Model Context Protocol, or MCP, servers to distribute SmartLoader malware through trusted-looking GitHub projects and public capability catalogs. The operation turns a routine search for an AI integration into […] The post AgentBaiting Campaign Uses 800 Fake AI Skills and MCP Servers to Deliver SmartLoader Malware appeared first on Cyber Security News.
Malware operators are increasingly using tools built to extend artificial intelligence as a delivery route. A newly documented campaign called AgentBaiting uses fraudulent AI Skills and Model Context Protocol, or MCP, servers to distribute SmartLoader malware through trusted-looking GitHub projects and public capability catalogs. The operation turns a routine search for an AI integration into a malware risk. Victims can be steered to ZIP archives presented as useful installers, then encouraged to extract and run files that have no connection to the advertised…
Extras afișat conform termenilor RSS ai publicației · 83 cuvinte · textul integral și figurile sunt pe site-ul publicației
Subiecte conexe

Fake AI Tool Campaign Turns Developer Interest Into Enterprise Initial Access
Cybersecurity News · 4 aug. 2026

Weekly Cyber Security Newsletter Bulletin – Entra ID RCE, Claude Code Ransomware, T-Mobile Cable, Azure Credential Theft +20 Stories
Cybersecurity News · 23 aug. 2026

Hackers Hijack HBO Max Reddit Account to Push 108 ClickFix Malware Ads
Cybersecurity News · 15 sept. 2026

Hackers Are Using Fake Crypto Wallet Screens to Steal Recovery Phrases and Browser Sessions
Cybersecurity News · 28 iul. 2026