New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis

The Gaslight malware represents a novel and dangerous evolution in adversarial tactics: rather than simply evading detection, it actively manipulates AI-assisted triage tools by injecting fabricated system messages that cause those tools to abandon analysis entirely. This matters because security teams are increasingly relying on AI co-pilots and automated triage agents to handle alert volume, creating a new attack surface where the analysis pipeline itself becomes a target. If defenders trust AI output without critical validation, adversaries can blind them at the exact moment a threat is active. The use of Telegram for command-and-control further obscures malicious traffic within legitimate encrypted communication channels, compounding detection difficulty.