gcdRadar
closedclosed 25 Jul 2024Breaches & attacks4 Confirmed real-world lossAI

NullBulge AI-Powered Malware Compromises Disney Employee and Internal Data

NullBulge Malware

A Disney employee downloaded AI-powered malware attributed to NullBulge, leading to an enterprise data breach. Hackers exposed internal Slack messages and employee financial records.

first report
11 Jul 2024
last update
11 Jul 2024

Timeline · 1

  1. 11 Jul 2024NullBulge's AI-Powered Malware Allegedly Compromises Disney Employee and Internal Data

Sources · 1

Research and catalogues

  1. 2024-07-11

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
AI-enabled attack
categories
AI-generated malware
severity
4 · Confirmed real-world loss
targets
Enterprise deployment, Individuals
owasp llm top 10
no entry for these categories
dates
happened 11 Jul 2024 · first reported 11 Jul 2024
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.90 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# NullBulge AI-Powered Malware Compromises Disney Employee and Internal Data

https://gcdradar.vercel.app/incidents/nullbulge-ai-powered-malware-compromises-disney-employee-and · AIR-2024-0053 · closed 2024-07-25

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss)
- Fix status: No fix needed
- First reported: 2024-07-11
- AI role: AI-enabled attack
- Products: NullBulge Malware

## Summary

A Disney employee downloaded AI-powered malware attributed to NullBulge, leading to an enterprise data breach. Hackers exposed internal Slack messages and employee financial records.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2024-07-11: NullBulge's AI-Powered Malware Allegedly Compromises Disney Employee and Internal Data (https://incidentdatabase.ai/cite/950)

## Sources

- 2024-07-11 AI Incident Database: NullBulge's AI-Powered Malware Allegedly Compromises Disney Employee and Internal Data https://incidentdatabase.ai/cite/950

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    AI
  2. closed
    FIN7 Linked to Malware Distribution via Fake AI Nudify Websites

    Breaches & attacks · Exploited · since 2 Oct 2024

    AI
  3. closed
    AI
  4. closed
    LAMEHUG LAMEHUG Malware Integrates LLM for Real-Time Command Generation

    Breaches & attacks · Exploited · since 10 Jul 2025

    AI
  5. closed
    AI
  6. closed
    AI