La utilización de inteligencia artificial en actividades maliciosas no es nueva. Se ha demostrado que, aplicadas a un ciberataque, estas capacidades pueden facilitar la automatización de actividades ilícitas.
【局限】文章承认AI在恶意活动中使用并非新鲜事，但没有提供历史背景或先前案例。需要了解这是否真的是首次AI代理执行的数据泄露，还是AI只是被用作更大攻击链的一部分。缺乏这些背景信息使得难以评估这一事件的真实意义和独特性。
De hecho, desde hace tiempo se emplean modelos generativos para redactar mensajes de phishing, traducir campañas fraudulentas, suplantar identidades, analizar código o facilitar la búsqueda de vulnerabilidades.
【数据】文章提到AI长期被用于恶意活动，但没有提供任何具体数据或案例来支持这一说法。需要了解有多少已记录的攻击涉及AI工具，这些工具的成功率如何，以及它们与手动攻击相比的效率差异。这些数据对于评估AI威胁的真实规模至关重要。
Hundreds of packages involved—mostly targeting us, but some carrying exploits.
【数据】RubyGems攻击涉及数百个恶意包，这一具体数字显示了攻击规模之大。这表明AI代理能够大规模生成和部署恶意代码，对软件供应链安全构成严重威胁，远超传统攻击者的能力范围。
However, it’s important not to confuse the concept of being scammed (social engineering) with being hacked (technical breaches).
Consider uninstalling the malicious Stylish extension. In 2016, with no input from the userbase, through some guy, pretending to be an independent developer, it basically was sold to a shady web analytics company, Similarweb. Since then, it is actively sharing your entire non-anonymized browsing history demo with them, assuming you ever clicked on one of the flashy "Agree" buttons. It initially did this without even asking for consent, and was banned from extension stores afterwards. Currently, it still breaks store policies, yet is not banned for unknown to me reasons. This website only works with the Stylus extension, which is an open-source privacy-friendly fork of the now-malicious Stylish extension.
Ikeda, A., Yonemitsu, F., Yoshimura, N., Sasaki, K., & Yamada, Y. (2022, January 27). The Open Science Foundation clandestinely abused for malicious activities in unintended manners. https://doi.org/10.31234/osf.io/xtuen
Mattei, M., Caldarelli, G., Squartini, T., & Saracco, F. (2021). Italian Twitter semantic network during the Covid-19 epidemic. EPJ Data Science, 10(1), 1–27. https://doi.org/10.1140/epjds/s13688-021-00301-x
Here is a simplified example of a malicious .gitlab-ci.yml
Advertisements are often injected with malware.
self-regulation is a core part of why adtech is in the abject mess it’s in.
The deceitful obfuscation of commercial intention certainly runs all the way through the data brokering and ad tech industries that sit behind much of the ‘free’ consumer Internet. Here consumers have plainly been kept in the dark so they cannot see and object to how their personal information is being handed around, sliced and diced, and used to try to manipulate them.
From an ad tech perspective, the concern is that manipulation doesn’t work when it’s obvious. And the goal of targeted advertising is to manipulate people’s decisions based on intelligence about them gleaned via clandestine surveillance of their online activity (so inferring who they are via their data). This might be a purchase decision. Equally it might be a vote.
When the process of the court is abused, the judges can and will intervene to stop it, if they can, before any harm is done.
Abuse of Court through frivolous litigation for ulterior goals and motives