Google GTIG's Latest: AI Distillation Attacks Spike as Hackers Clone Models and Build Smarter Malware
Threat actors aren't just using AI; they're stealing it. Google's GTIG details a wave of distillation attacks and new AI-malware hybrids that could reshape cyber ops.
⚡ Key Takeaways
- Model distillation attacks surged in 2025, mainly from private entities—not APTs yet. 𝕏
- DPRK, Iran, PRC, Russia use LLMs for faster recon and phishing; new malware like HONESTCUE integrates APIs. 𝕏
- Google disrupts via bans and hardening, but underground jailbreak services signal growing ecosystem. 𝕏
Worth sharing?
Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.
Originally reported by Mandiant Blog