New macOS malware tricks AI scanners with fake error comments

A recently discovered macOS malware has been engineered to mislead AI‑based triage systems by inserting a large JavaScript block comment at the very beginning of its main payload file, <index.js>. The comment contains fabricated system instructions and policy‑triggering content that is designed to confuse language‑model‑driven scanners or analyst copilots that feed the file’s opening lines to a model without properly isolating untrusted data. The genuine malicious code follows the comment, wrapped in a try{eval(...)} construct that processes a large character‑code array and a ROT‑style substitution function. This structure allows the malware to remain hidden from static detection methods such as YARA rules, entropy checks, abstract‑syntax‑tree parsing, or behavioural rules, while still exploiting weaknesses in naive AI‑first triage pipelines.

The technique exploits the fact that many AI‑driven malware detection systems ingest the beginning of a file to generate a prompt for a language model. By presenting a misleading header, the malware can trigger refusal behaviour, prompt confusion, context pollution, or premature classification before the scanner reaches the actual malicious code. The comment header is not a bypass of traditional static analysis; instead, it is a practical countermeasure against pipelines that rely heavily on LLMs for initial triage. Analysts note that this approach highlights the need for more robust AI‑driven detection pipelines that can isolate untrusted data and handle policy‑triggering content without compromising the integrity of the analysis.

The emergence of this malware underscores the evolving arms race between threat actors and defenders. While the malware does not evade conventional detection, it demonstrates how attackers can exploit the growing reliance on AI for rapid triage. Security teams are urged to review their AI pipelines, ensuring that language models are fed sanitized inputs and that multiple layers of detection remain in place to catch such sophisticated evasion tactics.