GoKawiilESET Finds Hackers Using Fake Nuclear Prompts to Blind AI Malware Scanners
ESET Labs discovered that the Russia-aligned group UAC-0099 embedded a nuclear-weapon-related phrase into malicious VBScript code targeting a Ukrainian victim. The text was designed to trigger AI safety filters, causing security tools' language models to refuse analysis of the surrounding malicious code, a technique researchers are calling GuardBreaker.
GoKawiil's interpretation of the reporting above, not reported fact.
This shows attackers exploiting AI's own safety guardrails as a blind spot rather than building more advanced malware, turning a protective feature into an attack surface. As AI increasingly handles malware detection and vulnerability discovery at speeds far outpacing traditional patch cycles, gaps like this highlight why governance and oversight of AI security tools can't be an afterthought.
- Attackers can manipulate AI safety triggers to prevent malware code from being analyzed.
- The GuardBreaker technique was used by Russia-aligned group UAC-0099 against a Ukrainian target.
- AI is speeding up both vulnerability discovery and exploitation, straining traditional cybersecurity response timelines.
ESET Internet Security (antivirus software) — With attackers now gaming AI analysis tools to sneak malware past defenses, layered endpoint protection matters more than ever. ESET's consumer security suite comes from the same labs that uncovered the GuardBreaker technique described here, covering malware, phishing and network protection on your everyday machines.
See ESET Internet Security (antivirus software) on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: darkreading.com — Tony Anscombe, 2026-09-11
Published there as: “AI Governance Can't Wait”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.