Cisco Found a New Way to Hunt Malware by the Prompts It Leaves Behind

The malware may change its code, but it still has to explain its task to a model. Cisco Talos is turning that language into a detection surface.

The malware may change its code, but it still has to explain its task to a model. Cisco Talos is turning that language into a detection surface.

Cisco Talos found UAT-10147 using agentic AI to scale exploitation and post-compromise work across a target list containing approximately 170,000 web-server URLs.

Cisco has documented three distinct FMC attack campaigns, including no-login root access, Sandworm-linked tooling and ransomware preparation. Patch exposed managers and investigate each cluster separately.

JWR combines 44 phishing pages with an encrypted WebSocket and live operator commands, turning a fake page into an adaptive fraud session.