technology
Google Detects Planned AI-Assisted Zero-Day Exploit, Disrupts Mass Exploitation Attempt Before Use
A group known by the acronym GTIG recorded hackers employing an AI model to discover and weaponize a zero-day vulnerability. Google said the criminal threat actor planned a mass exploitation event but that its proactive counter discovery may have prevented its use. The findings highlight growing use of available AI tools such as OpenClaw by groups linked to China and North Korea.
May 11, 2:11 PM·2m read1 source
Substrate placeholder — needs reviewAudio version
Tap play to generate a narrated version.
Developing·Limited corroboration so far. This page will refresh as more sources emerge.
The group known by the acronym GTIG recorded hackers using an AI model to find and exploit a zero-day vulnerability, creating a way to bypass two-factor authentication. GTIG said it has "high confidence" in the detection. The criminal threat actor planned to use the zero-day exploit in a mass exploitation event, but Google's proactive counter discovery may have prevented its use, the company wrote in a post without disclosing the name of the hacker group.
Google does not believe that its homegrown Gemini model was used by the hackers. The findings underscore how hackers are using available AI tools like OpenClaw to exploit software flaws in ways that can be particularly damaging to companies, government agencies and other organizations.
In Monday's report, Google highlighted several examples of how hackers are already using tools such as OpenClaw to find vulnerabilities, launch cyberattacks and develop malware.
Groups linked to China and North Korea demonstrated significant interest in capitalizing on AI for vulnerability discovery, the report said. Hackers are using available AI tools like OpenClaw to exploit software flaws even as cybersecurity firms pump billions of dollars into bolstering their defenses, CNBC reported.
The episode comes as the artificial intelligence industry grapples with the dual-use risks of powerful models.
In April, Anthropic delayed the rollout of its Mythos model citing worries that criminals and adversaries could use the tool to identify and prey on decades-old software vulnerabilities. The concerns over Anthropic's Mythos model sent shockwaves through the industry and led to White House meetings with technology and business leaders.
