LAMEHUG

Reported Context (21)

LameHug / LameHubloader ReversingLabs Finds Growing AI Signals in Malware, but No Measurable Attack Surge
Response Team identified LAMEHUG, a malware family that integrates AI into its workflow. Attributed to Cisco’s 2026 AI Security Report Highlights Agentic and Supply Chain Risks
LameHug, Python-based malware that CERT-UA attributes with moderate confidence to IRON TWILIGHT (APT28), queried a hosted open-weight model to dynamically generate Windows reconnaissance commands per environment, making Sophos AI Security Report 2026: AI Accelerates Attacks and Expands Enterprise Exposure
- CERT-UA discovers LAMEHUG, an infostealer that relies on LLM. HiddenLayer’s 2026 AI Threat Report Highlights Agentic Security and Supply Chain Gaps
Uses LAMEHUG malware, CrowdStrike 2026 Threat Report Finds Faster Intrusions and Rising AI-Enabled Attacks

CVE (59)

Malware (70)

People (27)

Threat Actors (97)

MITRE ATT&CK (85)

Vendors (47)

Products (127)

Tools (68)

Industries (44)

Countries (26)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.