New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis

The Gaslight implant embeds a cascade of fabricated system-failure messages designed to trick LLM-assisted triage tools into aborting analysis. It's attributed to North Korea-aligned actors and uses a Telegram bot API for command-and-control.

Featured · Phil Stokes