I want to make a public blacklist of people who pass off AI writing as their own words. In my view it is tantamount to fraud. It should be disclosed at the top of the page if AI was used.

I would be much more surprised by a system of commands which could be read in any order.

I have to nope out of half the articles I read here lol

How about this one?

> That interpreter is not used just once. When a trigger later delivers a follow-up program, over any of the transports described further down, the exact same interpreter function runs it.

Very interesting, right? An interpreter that is not used just once. Because we all know about those one-time-use interpreters, but this one, is USED MULTIPLE TIMES.

/s

I bet this is Claude, and this is Anthropic’s fix for “it’s not X, it’s Y.”

Depends on the target, id consider something like Stuxnet to be top-notch given: - Delivery - Target resources (another state) - Target defenses (I like to think that the iranians had good security) - Stealthiness - Target architecture. Its easier to write something for Android (for which we have the OS open sourced) than for siemens PLC

But as others say, you wouldn't want to advertise your exploit as top-notch, as it will bring unwanted attention

This thing has been in the wild since 2024, so it had a good run.

It looks pretty bespoke, so there are likely other variants.

Also targeting the anti-virus executable is a smart way to hide. I don't think this backdoor was cheap to develop.

Nothing, because blackhat activity disqualifies itself from such a label. Recognition is actively withheld since it'd encourage some bad actors. Same reason malicious software is always given a different name even if one can be found in it.