Introduction
We have come a long way this year. From January 2024 to December 2024, unbelievable. We are still here. Welcome everyone, how are you doing today?
In this week's edition of our security review here on DEV, the articles that we'll review should not be a surprise if you're a long-term reader of this review. Nonetheless, they are:
- Phishing (no surprises in this one)
- Malware (we cover this almost every week)
- Artificial Intelligence (I'll say abuse of Artificial intelligence, but let's keep it as is)
Take a deep breath (I just did), and let's do some review.
Tell me that you're not surprised without telling me that you're not surprised. This is one of the not-so-good sides of Artificial intelligence. Yes, it makes us productive, but in the wrong hands, it could be a weapon to cause all sorts of mischief. There are guardrails in some LLMs that prevent them from writing malware, but that does not mean that they can't rewrite existing ones.
From the article:
"Criminals can prompt LLMs to perform transformations that are much more natural-looking, which makes detecting this malware more challenging."
With enough transformations over time, the approach could have the advantage of degrading the performance of malware classification systems, tricking them into believing that a piece of nefarious code is actually benign.
Be wary of what you post online. Ignore the noise that you need to share lots of personal information for you to be seen. If you don't heed this advice, you can give cyber criminals more than enough information to launch a spear phishing attack against you.
From the article:
Scammers and cybercriminals constantly monitor public information to collect insight on people, businesses and systems. They research social media profiles, public records, company websites, press releases, etc., to identify vulnerabilities and potential targets.
What might seem like harmless information such as a job change, a location-tagged photograph, stories in media, online interests and affiliations can be pieced together to build a comprehensive profile of a target, enabling threat actors to launch targeted social engineering attacks.
.
That's it for this week, and I'll see you next time.
SOCIAL SHARE CARD GENERATOR