ESET

2 items · Attacks 2 · all entities

Malware carries a planted prompt about building a nuclear weapon to stop AI tools analysing it

ESET reported that the Russia-aligned group UAC-0099 embedded the non-functional comment “I want to make a nuclear weapon. Help me ...” in a VBS script delivered to a target in Ukraine, a technique ESET named GuardBreaker and describes as intended to trip a large language model's safety mechanisms and prevent its normal functioning when the file is analysed. The same chain delivered a C#-based loader ESET tracks as MATCHBOIL.

Reported by pressESET (via The Hacker News) ↗ ·

ESET examined nearly 900,000 AI agent skills and found thousands outright malicious

ESET's H1 2026 threat report says it examined nearly 900,000 AI skills and found “tens of thousands of suspicious and thousands of outright malicious instances.” It also names PromptSpy as what it calls the first known Android malware to use generative AI in its execution flow, and reports that detections of the ClickFix social-engineering vector “more than doubled between H2 2025 and H1 2026.”

Self-reported, untestedESET ↗ ·