Slopoly: First Confirmed AI-Generated Malware in Ransomware Chain.

IBM X-Force documented Hive0163 deploying "Slopoly," a PowerShell backdoor with strong LLM indicators — extensive comments, structured logging, an unused Jitter function from iterative development. It calls itself a "Polymorphic C2 Persistence Client" but can't actually modify its own code. IBM warns this signals a "fundamental shift" — AI doesn't increase malware sophistication but dramatically reduces development time. IBM X-Force