The skills pay the bills.
From Research Saturday by N2K Networks
May 30, 2026 · 24 min · Season 10 · Episode 427
About this episode
Marco Giuliani discusses the evolution of cybercrime through the use of AI skill lures in malware campaigns.
Today we are joined by Marco Giuliani, Vice President & Head of Research at ThreatDown, discussing their work on "GachiLoader adopts AI skill lure." Threat actors are now using fake AI agent “skills” as highly convincing social engineering lures, with a new campaign disguising the GachiLoader malware as a legitimate OpenClaw tool for automated Polymarket betting. Victims are tricked through fake installation guides and polished Electron apps into downloading malware that deploys the Rhadamanthys infostealer using fileless injection and blockchain-based command-and-control infrastructure. Researchers say the campaign marks an evolution in cybercrime, turning AI skill ecosystems into a new phishing-style attack surface. The research and executive brief can be found here: GachiLoader adopts AI skill lure Learn more about your ad choices. Visit megaphone.fm/adchoices
People in this episode
Guest: Marco Giuliani
Topics covered
- cybersecurity
- AI
- malware
- social engineering
- phishing
- research
Keywords
- GachiLoader
- AI skill lure
- malware
- social engineering
- cybercrime
- Rhadamanthys
- Polymarket
Mentioned in this episode
Organizations: ThreatDown, Polymarket
Products: GachiLoader, OpenClaw, Rhadamanthys
More episodes of Research Saturday
- Ghosted by Grafana · May 23, 2026 · 26 min
- Scam papers served. · May 16, 2026 · 27 min
- The spy who logged me in. · May 9, 2026 · 24 min
- Double-edged threat. · May 2, 2026 · 31 min
- A QRazy clever scam. · April 25, 2026 · 19 min
- A new breed of RAT. · April 18, 2026 · 22 min
Explore listener stats, chart rankings, contacts and more on the Research Saturday podcast page.