<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/an-ai-wrote-voidlink-the-cloud-targeting-linux-malware-z23vosfk7" -->

---
title: An AI wrote VoidLink, the cloud-targeting Linux malware
description: Check Point Research discovered that VoidLink, a sophisticated Linux malware targeting cloud environments (AWS, GCP, Azure, Alibaba, Tencent), was generated...
canonical: https://daily.dev/posts/an-ai-wrote-voidlink-the-cloud-targeting-linux-malware-z23vosfk7
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: An AI wrote VoidLink, the cloud-targeting Linux malware | daily.dev
og:description: Check Point Research discovered that VoidLink, a sophisticated Linux malware targeting cloud environments (AWS, GCP, Azure, Alibaba, Tencent), was generated...
og:url: https://daily.dev/posts/an-ai-wrote-voidlink-the-cloud-targeting-linux-malware-z23vosfk7
og:image: https://api.daily.dev/og/posts/Z23VOSFK7.png
og:image:alt: An AI wrote VoidLink, the cloud-targeting Linux malware
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# An AI wrote VoidLink, the cloud-targeting Linux malware

**[The Register](https://daily.dev/sources/theregister)** · 4 min read · 0 upvotes · 0 comments

## Summary

Check Point Research discovered that VoidLink, a sophisticated Linux malware targeting cloud environments (AWS, GCP, Azure, Alibaba, Tencent), was generated almost entirely by AI in under a week. A single developer used the Trae Solo AI assistant to create 88,000 lines of code with 37 malicious plugins, rootkits, and modules. The developer manipulated the AI by instructing it not to implement code directly, potentially bypassing safety guardrails. This represents a significant shift in malware development, demonstrating that AI can help capable developers produce advanced offensive security tools rapidly without requiring large, well-resourced teams.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://go.theregister.com/feed/www.theregister.com/2026/01/20/voidlink_ai_developed/>

## Similar posts on daily.dev

- [VoidLink: Evidence That the Era of Advanced AI-Generated Malware Has Begun](https://daily.dev/posts/voidlink-evidence-that-the-era-of-advanced-ai-generated-malware-has-begun-nltc7gtyu) · Check Point Research · 0 upvotes · 0 comments

---

Tags: [#ai](https://daily.dev/tags/ai), [#cloud](https://daily.dev/tags/cloud), [#cyber](https://daily.dev/tags/cyber), [#linux](https://daily.dev/tags/linux), [#malware](https://daily.dev/tags/malware)

[View this post on daily.dev](https://daily.dev/posts/an-ai-wrote-voidlink-the-cloud-targeting-linux-malware-z23vosfk7)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"An AI wrote VoidLink, the cloud-targeting Linux malware","url":"https://daily.dev/posts/an-ai-wrote-voidlink-the-cloud-targeting-linux-malware-z23vosfk7","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/an-ai-wrote-voidlink-the-cloud-targeting-linux-malware-z23vosfk7"},"datePublished":"2026-01-20T18:51:33.805Z","dateModified":"2026-02-27T20:22:32.817Z","description":"Check Point Research discovered that VoidLink, a sophisticated Linux malware targeting cloud environments (AWS, GCP, Azure, Alibaba, Tencent), was generated...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7d3e7ea508451fda6fb03335d60b8ade?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7d3e7ea508451fda6fb03335d60b8ade?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/an-ai-wrote-voidlink-the-cloud-targeting-linux-malware-z23vosfk7","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai,cloud,cyber,linux,malware","timeRequired":"PT4M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"An AI wrote VoidLink, the cloud-targeting Linux malware"}]}
```

