Palo Alto Unit 42 ·EN-US Vendor research ResearchTuxBot v3 Evolution
TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development
Executive Summary
We identified a previously undocumented modular internet-of-things (IoT) botnet framework named TuxBot v3 Evolution.
The malware authors leveraged an LLM to assist in their code development, yielding mixed results. While the AI complied with their request to generate botnet code, it included a safety disclaimer that the developer failed to remove before shipping.…