BlackByte

Cisco Talos identifies a new malware archetype, 'A3: AI-Analysis Evasion,' where malware embeds natural-language instructions to manipulate AI-based analysis systems. This technique exploits ambiguity in AI pipelines by injecting prompts that attempt to mislead models into classifying malicious files as benign or refusing analysis. Four malware families—FRUITSHELL, PLOTSAFE, HOLLOWCLAD, and MANTLEMAZE—demonstrate evolving tactics including template spraying across multiple LLM formats, intimidation messages, and false claims of intellectual property or government affiliation. These evasion methods are detectable due to their plaintext nature, and while simple instructions can influence AI verdicts, more complex attempts often backfire or have limited impact.

In Q2 2026, multiple ransomware groups remained active, with Qilin emerging as the most prolific based on victims listed on data leak sites. Microsoft disrupted a malware-signing-as-a-service operation run by the threat actor Fox Tempest, which was used by several ransomware groups including Rhysida, Akira, and Qilin. CISA added a Windows local privilege escalation vulnerability (CVE-2026-33825, BlueHammer) to its KEV catalog due to active exploitation in ransomware attacks. Check Point attributed zero-day exploitation of a critical vulnerability in its Remote Access VPN (CVE-2026-50751) to the Qilin ransomware group. Additionally, the PayoutsKing group was observed using QEMU to deploy hidden Alpine Linux-based virtual machines as a stealthy backdoor technique.