Malware authors use nuclear and biological weapons language to evade scanners

A Hades supply-chain wave hid weapons-policy bait in non-executing code comments to jam LLM-first malware triage.

By · Published

Primary source: X

Why it matters

The incident turns an AI safety feature into a predictable security failure mode: a model that refuses too early can become the blind spot attackers route around.

Illustration of the Hades supply-chain wave showing nuclear and biohazard symbols hidden inside code comments to confuse malware triage

John Scott-Railton (@jsrailton), the Citizen Lab spyware researcher, flagged a practical failure mode for AI security tooling this week: malware authors are putting nuclear and biological weapons language into malicious code so safety-tuned models refuse to analyze it.…

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.