We analyze novel attack vectors where malicious JavaScript is dynamically generated at runtime. This process leverages client-side API calls to trusted LLM services, initiated from an initially benign webpage (hiding malicious code in a text prompt). Read the threat brief here: bit.ly/4qQW0Cp
bit.lyThe Next Frontier of Runtime Assembly Attacks: Leveraging LLMs to Generate Phishing JavaScript in Real TimeWe discuss a novel AI-augmented attack method where malicious webpages use LLM services to generate dynamic code in real-time within a browser.
0 reposts0 likes