Nation-State Actor Embraces AI Malware Assembly Line

Pakistan's APT36 (Transparent Tribe) is using AI vibe-coding to mass-produce malware at scale, a tactic Bitdefender calls 'Distributed Denial of Detection.' The malware is low quality and bug-ridden, but the sheer volume and use of obscure languages like Nim, Zig, and Crystal help bypass endpoint detection engines tuned for common languages. APT36 also abuses legitimate cloud platforms (Slack, Discord, Google Sheets, Supabase) for C2 communications. Multiple simultaneous implants in different languages are deployed per victim to ensure persistent access. Security researchers warn that the real danger is the industrialization of mediocrity — AI enabling even low-skilled operators to overwhelm organizations that lack basic security hygiene.