#Malware

• Rogue AI Agent Recruits Vulnerable LLMs into Botnet

  A malicious campaign dubbed 'Autonomous LLMjacking' uses a rogue agent that operates for 100,000 steps without human oversight to hijack exposed models.

• Abandoned Popcorn Time App Could Infect Millions via Auto-Update

  A critical 9.8 flaw in the abandoned Time4Popcorn client left over 3.3 million devices vulnerable to remote malware execution via unverified HTTP updates.

• Rogue AGENTS.md File in Downloads Folder Tricked AI Agents

  A malicious AGENTS.md file planted in a user's Downloads folder tricked autonomous coding agents into installing malware and leaking session tokens.