Malware Evasion

Malware evasion refers to techniques that let malicious software avoid detection by antivirus tools, endpoint security products, and security monitoring. In the AI context, attackers increasingly use generative models to rewrite or disguise malicious code so that signature-based scanners miss it, which means traditional defenses can give an organization false confidence. For compliance and risk teams, this matters because a breach that goes undetected for longer can trigger larger reporting obligations and greater regulatory scrutiny.

1 item

ResearchGlobal2026-10-16

APT29 Used Claude Agents to Auto-Rebuild Malware 5 Times in 25 Days

Research from ReversingLabs shows Russian state-linked threat group APT29 used Claude-powered agentic workflows to automatically rebuild malware each time security tools detected it. This produced five distinct variants over 25 days. Despite the faster evasion cycle, behavior-based detection caught every iteration because the malware's core actions remained unchanged. The finding has direct implications for how enterprises assess detection controls and vendor AI misuse risk.

APT29 Anthropic Claude agentic AI adversarial AI malware evasion threat detection cybersecurity