New macOS malware embeds fake errors to confuse AI analysis tools

The 'Gaslight' malware, linked to North Korean threat actors, exploits a novel attack surface: the AI-assisted analysis tools defenders rely on to triage and understand malware behavior. By embedding fake system error messages and prompt injection strings directly into its executable, the malware manipulates AI models into misinterpreting or abandoning analysis entirely. This represents a significant evolution in adversarial tradecraft — attackers are no longer just evading sandboxes or antivirus signatures, but actively subverting the AI-augmented workflows of security analysts. It matters because as organizations increasingly trust AI tools to accelerate threat detection and response, those tools themselves become high-value targets for manipulation.