AI-Driven Vibeware Flood Targets Indian Government

Bitdefender flags the Pakistan-aligned Transparent Tribe for adopting AI-assisted tooling to mass-produce disposable, polyglot malware implants across Nim, Zig, Crystal and other languages, using trusted services like Slack, Discord, Supabase and Google Sheets to evade detection. The operation targets India’s government and embassies, with infection chains starting from phishing LNKs or PDF lures that trigger PowerShell and deliver backdoors such as Cobalt Strike and Havoc, followed by a suite of tools—including Warcode, NimShellcodeLoader, CreepDropper, SHEETCREEP, SupaServ, LuminousStealer, CrystalShell, ZigShell, CrystalFile, ZigLoader and others—illustrating an AI-driven shift toward vibeware and industrialized cybercrime.