Hive0163 Deploys AI-Generated Slopoly Backdoor Framework

IBM X-Force in early 2026 reported that ransomware group Hive0163 deployed an AI-assisted PowerShell command-and-control client named Slopoly during an intrusion, following use of NodeSnake, InterlockRAT, and JunkFiction loader. X-Force found the script showed hallmarks of LLM generation and was used alongside Interlock ransomware and exfiltration tools, signaling accelerated attacker tooling iteration and detection challenges for defenders.