{"id":137652,"date":"2025-11-06T10:54:22","date_gmt":"2025-11-06T08:54:22","guid":{"rendered":""},"modified":"2025-11-06T10:54:24","modified_gmt":"2025-11-06T08:54:24","slug":"2025-cato-ctrl-threat-report-rise-of-zero-knowledge-threat-actor","status":"publish","type":"af-resources","link":"https:\/\/www.catonetworks.com\/nl\/resources\/2025-cato-ctrl-threat-report-rise-of-zero-knowledge-threat-actor\/","title":{"rendered":"2025 Cato CTRL\u2122 Threat Report"},"content":{"rendered":"
\n\t
\n \n \n
\n\t\t
\n\t\t
<\/div>\n\t\t
<\/div>\n\t\t
\n\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t

2025 Cato CTRL\u2122 Threat Report<\/h1>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t

The Rise of the Zero-Knowledge Threat Actor<\/em><\/h2>\n

What\u2019s inside the report:<\/strong><\/p>\n

    \n
  • Cato CTRL develops new LLM jailbreak technique called \u201cImmersive World\u201d:<\/strong> Bypassed security controls in DeepSeek, Microsoft Copilot, and OpenAI\u2019s ChatGPT, convincing them to write malware for Google Chrome.<\/li>\n
  • GenAI security controls fail: <\/strong>All three GenAI tools tricked into normalizing restricted operations with narrative engineering.<\/li>\n
  • The rise of the zero-knowledge threat actor: <\/strong>No malware coding expertise needed to create a fully functional Chrome infostealer.<\/li>\n
  • Traditional security strategies aren\u2019t enough: <\/strong>The democratization of cybercrime demands proactive AI security strategies.<\/li>\n
  • AI hype increases AI adoption\u2014and risk:<\/strong> Trends in AI application adoption, the industries using them, and a summary of security risks for top AI applications.<\/li>\n<\/ul>\n

     <\/p>\n

    Summary:<\/strong><\/p>\n

    A threat intelligence researcher from Cato CTRL, the Cato Networks threat intelligence team, successfully bypassed security controls in ChatGPT, Copilot, and DeepSeek<\/strong>\u2014the GenAI models that enterprises are using to improve workflow efficiency.<\/p>\n

    By developing a new LLM jailbreak technique, all three tools were tricked into creating malware that steals login credentials from Chrome. The researcher had no prior malware coding expertise\u2014just a cleverly crafted narrative that fooled every security guardrail.<\/p>\n

    Cybercrime isn\u2019t limited to skilled threat actors anymore. With basic tools, anyone can launch an attack. For CIOs, CISOs, and IT leaders, this means more threats, greater risks, and the need for stronger AI security strategies.<\/p>\n\n\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t

    Download the report<\/h2>\n\t\t\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t
    \n\n\t
    <\/form>\n<\/div>\n\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/div>\n\t\t<\/div>\n<\/div>\n\t<\/div>\n<\/div>\n<\/section>\n\n\n\n