Researchers Uncover GPT-4-Powered MalTerminal Malware Creating Ransomware, Reverse Shell

Cybersecurity researchers from SentinelOne SentinelLABS have identified MalTerminal, the earliest known malware integrated with Large Language Model (LLM) capabilities, highlighting a new frontier in malicious AI applications. Presented at LABScon 2025, this development demonstrates how LLMs are being embedded into malware to enhance its sophistication, potentially enabling more advanced social engineering, code generation, or evasive tactics. The integration of LLMs into malware signifies a significant escalation in cyber threats, emphasizing the need for robust detection and mitigation strategies as malicious actors leverage AI to improve their attack vectors.