In February 2024, the security company Group-IB discovered a malware named "GoldPickaxe," which is the first AI virus software of 2024. This malware tricks users into undergoing facial recognition and submitting identification information. It then uses this information to generate fake videos. These fake facial videos can deceive the biometric systems of banks, allowing attackers to successfully log into the victim's bank accounts. What makes this even more dangerous is that the malware intercepts the bank's SMS verification codes, allowing attackers to perform transfers, make purchases, and even change account passwords. Creating malware is a specialty of AI. In the past, developing a powerful malware might take months. But with the proliferation of AI tools, attackers can now automatically generate malware in just a few minutes. This automated attack tool greatly enhances attack efficiency, and AI's strong understanding of programming languages allows it to quickly discover potential vulnerabilities in software. These automatically generated malware not only increase the speed of attacks but also shorten the reaction time window for defenders. Cybersecurity teams are forced to face more frequent and complex attacks, posing a significant challenge to existing defense mechanisms.

In addition to creating malware, attackers can use AI to conduct in-depth analysis of entire software or system codebases and suggest modifications or replacements. In such cases, attackers can easily implant malicious code, create counterfeit apps, or inject malware into legitimate software. Moreover, AI-generated code often manages to bypass conventional security checks.

AI can also send automated DDoS attacks. Traditional DDoS attacks rely on vast networks of "botnet" devices to initiate attacks, while AI-driven autonomous systems can automatically locate and exploit vulnerable devices, creating even larger botnets. These intelligent systems are not only capable of launching massive DDoS attacks but can also adjust their attack modes in real time based on the target system's response. This means that the attack systems can "learn" the weaknesses in the target's defenses, continuously optimizing their attack strategies to maximize damage.

Moreover, AI can identify potential vulnerabilities in networks and systems. Attackers use AI-based tools to identify vulnerabilities within the IT networks, software, or systems of financial institutions. These tools not only help attackers discover zero-day vulnerabilities but also automatically generate attack scripts targeting specific systems. This technology allows attackers to conduct more precise and targeted attacks, particularly when targeting financial systems, data centers, and other high-value assets.