Attackers Are Learning to Live Off the AI Toolchain

Attackers are developing malware like Sandworm_Mode that exploits trusted AI tools and workflows, making malicious activity indistinguishable from normal operations. This represents an early example of living off the AI toolchain, where attackers leverage AI systems to evade detection. Security teams must adapt defenses to identify AI-enabled threats that blend into routine AI-assisted workflows.