[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmuugmKzyWzTrsqLN_q1SfwH2s_iNC-c44ejFr5gKP-Y":3},{"article":4,"iocs":44},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":24,"category":25,"article_tags":28},"9a8e9133-a7b7-4741-a0e6-1bb8f87763d7","Attackers Are Learning to Live Off the AI Toolchain","attackers-are-learning-to-live-off-the-ai-toolchain-b6268e","Sandworm_Mode is an early example of malware that exploits trusted AI tools and workflows to make malicious activity virtually indistinguishable from normal activity.","Sandworm_Mode is an emerging malware that demonstrates attackers' growing ability to exploit trusted AI tools and workflows. This technique allows malicious activities to blend seamlessly with legitimate operations, making detection significantly more challenging.","Sandworm_Mode malware leverages AI toolchains to mask malicious activity as normal operations.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fcyber-risk\u002Fattackers-live-off-ai-toolchain","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt3487664d9c613ba9\u002F6a61308f2c3e688b979308a0\u002Fai_TSViPhoto_shutterstock.jpg?width=720&quality=80&disable=upscale","2026-07-22T21:29:01+00:00","2026-07-22T22:00:15.306523+00:00",7,[18,21],{"name":19,"type":20},"Sandworm","threat_actor",{"name":22,"type":23},"AI toolchain","technology","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":24,"icon":11,"name":26,"slug":27},"Malware","malware",[29,34,39],{"category":30},{"id":31,"icon":11,"name":32,"slug":33},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":35},{"id":36,"icon":11,"name":37,"slug":38},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":40},{"id":41,"icon":11,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[45],{"type":27,"value":46,"context":47},"Sandworm_Mode","Malware name exploiting AI toolchains"]