Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

Slopoly

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

4

Findings

1

Edges

2

Sources

3

Corpus findings

2026-03-29 / sources-researcherIBM X-Force: Slopoly — First Confirmed AI-Generated Malware Framework Deployed by Hive0163 in Ransomware CampaignIBM X-Force disclosed Slopoly, a C2 persistence client with hallmarks of LLM-generated code: extensive comments, verbose logging, descriptive variable names, and self-labeled 'Polymorphic C2 Persistence Client' despite no actual polymorphic behavior. Deployed by ransomware group Hive0163 via ClickFix social engineering, it maintained persistent server access for over a week. X-Force notes this signals a fundamental shift — AI-generated malware frameworks are now appearing in real attacks by financially motivated groups.

Graph relationships

USES
Hive0163
Ransomware group Hive0163 deployed Slopoly C2 persistence client via ClickFix social engineering.
Source finding
USES
Hive0163 -> Slopoly
Ransomware group Hive0163 deployed Slopoly C2 persistence client via ClickFix social engineering.
Source finding

Source trail

IBM X-Force Mandiant's annual report GitLab Advisory

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues