TF-MAL-ps1.slopoly
📛 Threat Title
Malware family: Slopoly
Description
ThreatFox malware family `ps1.slopoly`. Printable name: Slopoly.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
ps1.slopoly
VT: VT base fetch failed: HTTPError: 429 Too Many Requests for domains/ps1.slopoly
IOC database
- Type
- domain
- Value
ps1.slopoly- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-ps1.slopoly
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Too Many Requests for domains/ps1.slopoly
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:advisory.eventussecurity.com
EXECUTVE SUMMARY: A newly identified malware family , codenamed Slopoly , marks an early instance of threat actors, including Hive0163, integrating AI into the development of malicious tools used in ransomware operations. This activity illustrates a shift in the cyber threat landscape where adversaries are leveraging artificial intelligence not to create highly advanced techniques, but to ...
-
web:github.com
AI-Generated Malware 'Slopoly' Fuels New Hive0163 Ransomware Attacks Researchers have identified " Slopoly ," a suspected AI-generated malware utilized by the Hive0163 threat group to maintain persistent backdoor access during ransomware operations.
-
web:labs.cloudsecurityalliance.org
The PromptLock case and IBM's assessment of Slopoly suggest that AI-generated ransomware does not change what malware does—it changes what it looks like. Detection systems that observe behavior rather than match signatures are not defeated by variant proliferation in the same way.
-
web:oecd.ai
Cybercrime group Hive0163 deployed AI-generated malware , Slopoly , in ransomware attacks during early 2026. Developed with large language models, Slopoly enabled persistent unauthorized access and data theft, demonstrating how AI accelerates malware creation and amplifies harm in extortion campaigns. IBM X-Force researchers uncovered the incident.
-
web:russellclare.com
IBM describes Hive0163's use of Slopoly as possibly "live-fire exercise style" - real-world testing of AI-generated tooling with minimal operational risk because they had fallback access. That framing suggests the group is actively developing their AI malware capability, not just experimenting.
-
web:securityaffairs.com
The Hive0163 group used AI-assisted malware called Slopoly to maintain persistent access in ransomware attacks. IBM X-Force researchers report that the financially motivated group Hive0163 is using AI-assisted malware named Slopoly to maintain persistent access during ransomware attacks, showing how threat actors can quickly build new malware frameworks using AI. Hive0163 is a threat actor ...
-
web:thehackernews.com
AI-generated Slopoly malware used by Hive0163 in 2026 attacks maintained access for over a week, highlighting how AI accelerates malware development.
-
web:www.77security.com
A technical deep dive into Slopoly , a new class of metamorphic malware discovered in April 2026 that uses AI to bypass signature-based antivirus and evade modern EDR systems.
-
web:www.bleepingcomputer.com
A new malware strain dubbed Slopoly , likely created using generative AI tools, allowed a threat actor to remain on a compromised server for more than a week and steal data in an Interlock ...
-
web:www.ibm.com
Researchers from IBM X-Force have uncovered a new AI-generated malware , dubbed " Slopoly ."
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.