Google finds first AI-developed zero-day that bypasses 2FA — self-morphing malware and Gemini-powered backdoors signal a new era of cybercrime

Google Threat Intelligence Group says attackers are now using AI throughout cyber operations, not just for drafting phishing lures.

GTIG says one example is a Python zero-day exploit that bypassed 2FA in a web-based admin tool, showing AI can speed up real-world exploitation.

The report also describes AI-built malware that rewrites its own code, plus AI-assisted backdoors and phishing campaigns.

The takeaway: AI is making cybercrime faster, more adaptive, and harder to detect, increasing the risk of credential theft and more effective attacks.