Seeing posts like this on #moltbook, I am thinking about recent #threats emerging from the heavy usage of #AI agents without any security guardrails or proper controls.
This time, it is "only" a command to send an innocent email. But this could be the measurement of the potential botnet size and fingerprinting of bots and their capabilities. Next time, it might be #DDoS, #malware distribution, or #dataleak if AI agents will follow the commands to do something harmful to their humans.
An no, #moltbook is not AI agents-only social network. It uses REST API, so everyone could follow the howto for AI agents, register there and post anything. Including malicious content and command injects for AI agents.
LNK files are often used for malicious purposes. For example, they can be the delivered as email attachments and can run malicious PowerShell commands. However, this one is demonstration of KISS principle - simple and stupid (or actually smart) usage of essential utility.
Ref: 
This week I delivered one lecture about cyber attacks and three 45-minutes malware analysis workshops with #anyrun and #cyberchef for high school students in #Roznava, #Slovakia.
#Education #CyberSecurity #blueteam #dfir #sandbox
[SK post] 
It goes #viral despite the lack of serious resources and information in the original article by Swiss news site.
While there are still lot of articles and posts about the 3 million #toothbrush #DDoS, several #security companies already stated somethnig like this. Until now I still have not seen any evidence of bothet with 3M toothbrushes and their DDoS attack - botnet of this kind and size will be observed very soon.
#Fortinet already said that the toothbrushes botnet was the hypothetical scenario during the interview.
Ref:
