Loading malware…
FruitShell is a publicly available PowerShell reverse shell that establishes remote command-and-control access to compromised Windows hosts and enables arbitrary command execution by an operator. It has been highlighted as an early AI-themed malware example because it embeds hard-coded prompt text intended to influence or bypass LLM-based security analysis rather than using an embedded model locally. Reporting places it in active operations, but it is generally characterized as relatively simple and readily detectable compared with mature malware families.
Functionally, FruitShell provides post-compromise remote shell access, allowing an attacker to issue commands on an infected system. Available reporting does not support advanced capabilities such as persistence, privilege escalation, or lateral movement as core confirmed features. It is commonly discussed alongside other AI-enabled or AI-adjacent malware families such as PromptFlux, PromptSteal, QuietVault, and PromptLock as part of a broader trend of adversaries experimenting with LLM-related evasion and workflow augmentation.
FruitShell is associated with the emerging category of malware designed to evade AI-assisted defensive analysis, but current assessments indicate these implementations remain comparatively unsophisticated. It targets Windows environments through PowerShell execution and is best classified as a reverse shell/backdoor used for remote access and command execution after compromise.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
4 distinct techniques documented for this family, organized by ATT&CK tactic.
There were no new MITRE attack techniques. Seven of eight operations ran T1059, Command & Scripting Interpreter, the single most ordinary technique in the framework.
13 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
PowerShell reverse shell that embeds prompts intended to bypass LLM-based security analysis.
Reverse shell malware engineered to evade or bypass AI-assisted security controls/detections.
Named as an example of 'AI-enabled malware' observed/covered by Google GTIG; specific functionality not described in the provided content.
PowerShell reverse shell script with LLM-aware prompt instructions, designed to bypass LLM-based analysis; primarily a penetration testing tool.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.