Case hp-wolf-vibe-hacking-2026AI-assisted malwareMar 4, 2026Worldwide

HP Wolf: AI-generated 'vibe-hacking' infection scripts slip past email gateways

HP's Q4 2025 Threat Insights Report documented attackers using AI to write infection scripts and rework lures, including a fake invoice PDF chain bouncing victims to Booking.com; 14 percent of threats evaded gateways.

MediumAttack using AIStatus: OngoingVerified case file

Open in the interactive map Cite this case

Reported: Mar 4, 2026
Location: Worldwide
Target: Enterprise email users
Severity: Medium
Triggered by: Unknown
Actor type: Criminal
Reported loss: None reported
CVE: None

What happened

Impact: At least 14 percent of email threats isolated by HP Sure Click had bypassed one or more gateway scanners.

Who triggered it

Actor: Unknown

Attribution: HP Security Lab telemetry from consenting customers, October to December 2025; actors not named.

Motive: Low-cost, high-volume malware delivery

How it happened

Attack vector: AI-generated scripts in modular flat-pack campaigns reusing shared installers with swapped lures and payloads

Root cause: Generative AI let attackers mass-produce script variants faster than signature defences adapt

Timeline

Oct 1, 2025Start of reporting window for AI-generated script campaigns
Mar 4, 2026HP publishes Threat Insights Report

Response

HP recommended isolation and exposure reduction over variant-by-variant detection.

Current status: Ongoing

Sources (open in a new tab)

SecurityBrief UK (HP report coverage) securitybrief.co.uk
Cyber Magazine cybermagazine.com

Cite this case

HP Wolf: AI-generated 'vibe-hacking' infection scripts slip past email gateways. AI Threat Watch, case hp-wolf-vibe-hacking-2026, Mar 4, 2026. https://aithreat.io/cases/hp-wolf-vibe-hacking-2026/

Permanent link: https://aithreat.io/cases/hp-wolf-vibe-hacking-2026/