Cybersecurity firm Aqua Security has uncovered a new AI-assisted Linux malware named Koske, designed for advanced crypto mining and stealth operations. Distributed via misconfigured JupyterLab instances, Koske uses AI-generated modular code, rootkits, and image-based polyglots to evade detection and persist. Experts warn this marks a dangerous shift toward AI-powered malware, capable of adapting to system defenses in real time.

‍