Ukraine's CERT-UA has exposed LameHug, a novel malware that leverages Alibaba Cloud's Qwen LLM via Hugging Face to dynamically craft data-theft commands on infected Windows systems. This innovation enables Russian state-backed group APT28 to adapt attacks in real-time, evading traditional defenses and signaling a dangerous evolution in cyber warfare.