A new sophisticated malware campaign, dubbed the LOTL (Living Off The Land) attack, leverages Windows native AI stack components to evade traditional detection mechanisms. This innovative approach allows attackers to blend malicious activities with legitimate system processes, making it harder for security tools to identify and mitigate threats. The malware exploits trusted Windows AI frameworks and libraries, enabling it to execute harmful payloads while appearing benign to endpoint protection systems. This technique represents a significant evolution in threat actor tactics, emphasizing the need for advanced behavioral analysis and AI-driven cybersecurity defenses. Organizations should prioritize monitoring AI-related Windows processes and update their detection strategies to counter these emerging threats effectively. The LOTL attack highlights the increasing complexity of cyber threats and the importance of integrating AI-aware security solutions in enterprise environments.
This Cyber News was published on www.darkreading.com. Publication date: Thu, 30 Oct 2025 20:10:05 +0000