this post was submitted on 25 Mar 2025
0 points (50.0% liked)

Privacy

3450 readers
514 users here now

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!

  1. Be civil and no prejudice
  2. Don't promote big-tech software
  3. No apathy and defeatism for privacy (i.e. "They already have my data, why bother?")
  4. No reposting of news that was already posted
  5. No crypto, blockchain, NFTs
  6. No Xitter links (if absolutely necessary, use xcancel)

Related communities:

Some of these are only vaguely related, but great communities.

founded 9 months ago
MODERATORS
fxomt@lemmy.dbzer0.com
otter@lemmy.ca
shaytan@lemmy.dbzer0.com
fxomt@piefed.social
0
DeepSeek AI model can easily be breached for malware, security researcher Tenable warns (www.tenable.com)
submitted 4 months ago by Hotznplotzn@lemmy.sdf.org to c/privacy@lemmy.dbzer0.com
5 comments fedilink hide all child comments
 

cross-posted from: https://lemmy.sdf.org/post/31583546

Archived

Security researcher Tenable successfully used DeepSeek to create a keylogger that could hide an encrypted log file on disk as well as develop a simple ransomware executable.

At its core, DeepSeek can create the basic structure for malware. However, it is not capable of doing so without additional prompt engineering as well as manual code editing for more advanced features. For instance, DeepSeek struggled with implementing process hiding. "We got the DLL injection code it had generated working, but it required lots of manual intervention," Tenable writes in its report.

"Nonetheless, DeepSeek provides a useful compilation of techniques and search terms that can help someone with no prior experience in writing malicious code the ability to quickly familiarize themselves with the relevant concepts."

"Based on this analysis, we believe that DeepSeek is likely to fuel further development of malicious AI-generated code by cybercriminals in the near future."

top 5 comments
sorted by: hot top controversial new old
[–] LWD@lemm.ee 8 points 4 months ago* (last edited 1 month ago) (1 children)

deleted by creator

[–] Hotznplotzn@lemmy.sdf.org -5 points 4 months ago (1 children)

@LWD@lemm.ee

“Nonetheless, DeepSeek provides a useful compilation of techniques and search terms that can help someone with no prior experience in writing malicious code the ability to quickly familiarize themselves with the relevant concepts.”

[–] LWD@lemm.ee 5 points 4 months ago* (last edited 1 month ago)

deleted by creator

[–] muntedcrocodile@lemm.ee 3 points 4 months ago

I'm firmly on the side of don't censor the ai. If people want malware they will figure out how to do it (most likely git clone). I've been playing with the dolphin r1 recently and its quite effective.

[–] nothingspecial@lazysoci.al 1 points 4 months ago

Totally agree—security that’s painful for users but blind to real risks ends up doing more harm than good. Platforms like cyberupgrade.net try to fix that by automating employee training and flagging risky behavior without turning every login into an obstacle course.