TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Trend Micro Research

Weaponized AI Assistants & Credential Thieves

Fernando Tucci · 2025-10-09 · Read original ↗

ATT&CK techniques detected

6 predictions
T1195.001Compromise Software Dependencies and Development Tools
100%
"prompts commanding the ai assistants to scan the victim ' s entire filesystem for credentials, ssh keys, and crypto wallets. this turned the developers ' own productivity tools into powerful, unwitting accomplices for data theft, establishing a new method for harvesting sensitive…"
T1195.001Compromise Software Dependencies and Development Tools
99%
"weaponized ai assistants & credential thieves just weeks after the s1ngularity attack weaponized ai assistants, the npm ecosystem was rocked by a far more dangerous threat : a self - propagating worm named shai - hulud. in a sobering demonstration of this rapid escalation in atta…"
T1195.001Compromise Software Dependencies and Development Tools
87%
"s developer packages is a stark reminder that in an automated attack, no one is off - limits. this was not a breach of crowdstrike ' s core falcon platform or corporate network. it was the result of the worm ' s indiscriminate, automated logic. once a publishing token was comprom…"
T1587Develop Capabilities
61%
"prompts commanding the ai assistants to scan the victim ' s entire filesystem for credentials, ssh keys, and crypto wallets. this turned the developers ' own productivity tools into powerful, unwitting accomplices for data theft, establishing a new method for harvesting sensitive…"
T1195.001Compromise Software Dependencies and Development Tools
53%
"on npm | reversinglabs | reversinglabs - s1ngularity / nx attackers strike again - crowdstrike npm packages hit by supply chain attack - updated and ongoing supply chain attack targets crowdstrike"
T1587Develop Capabilities
49%
"weaponized ai assistants & credential thieves just weeks after the s1ngularity attack weaponized ai assistants, the npm ecosystem was rocked by a far more dangerous threat : a self - propagating worm named shai - hulud. in a sobering demonstration of this rapid escalation in atta…"

Summary

Learn the state of AI and the NPM ecosystem with the recent s1ngularity' weaponized AI for credential theft.