LLM-Generated Reconnaissance Command Chain (LAMEHUG)

Salten Fisk@saltenfisk

•updated Mar 16, 2026•13•0•230

Detects the execution of multiple system reconnaissance commands concatenated into a single command line. This behavior is characteristic of the LAMEHUG malware, which uses LLMs to dynamically generate these command strings.