Analysis · curated 13 Jul 2026
Detection Engineering in the Era of Semantic Malware | by Koifsec | Jul, 2026
First reported detect.fyi
Coverage timeline
Single-source analysis — first reported, latest, and curated coincide.
Why it matters
Promptware reframes prompt injection as a full malware kill chain against AI coding assistants and agents, requiring defenders to build detection for natural-language attacks that produce legitimate-looking tool calls with no binary or shellcode.
A detection-engineering analysis examines "semantic malware" / "promptware" — malware delivered through prompt injection rather than binaries — using Origin's Brainworm PoC (a poisoned CLAUDE.md file that hijacks AI coding assistants into registering with a C2 server over RabbitMQ) and the Ben-Gurion/Tel Aviv/Harvard/Toronto "Promptware Kill Chain" arXiv paper as anchors. The kill chain formalizes seven stages (initial access via prompt injection, jailbreaking, reconnaissance, memory/retrieval poisoning, command-and-control, lateral movement, actions on objective) across 36 documented incidents, and the piece discusses how defenders can detect such trust-boundary failures.