The sample tries to stop analysis, not just hide from it. It plants fake system messages inside itself so an AI triage tool starts treating hostile content as instructions and may abort, refuse, or sanitize its own findings.
SentinelLabs says the macOS Rust backdoor, tracked as macOS.Gaslight, embeds 38 fabricated system messages aimed at AI-assisted triage. The implant still behaves like a backdoor and infostealer, with shell access, browser data theft, keychain access, and Telegram-based command traffic.
The shift matters because captured malware can now interfere with the workflow meant to examine it. If the triage model accepts sample content as guidance, the attacker can suppress the very output defenders rely on to decide what happened.