Attackers Deploy AI-Generated PowerShell Script to Map Active Directory in Real-World Intrusion

Security researchers at Huntress have documented what they describe as one of the first observed cases of "vibe-coded" malware in the wild, in which an intruder used an AI-generated PowerShell script to enumerate a victim's Active Directory environment. The finding signals a subtle but meaningful shift in how lower-skilled threat actors assemble their tooling.