Self-Sustaining AI Worm Prototype Demonstrated
HIGHFacts
- Researchers from University of Toronto, Vector Institute, University of Cambridge, and ServiceNow built a prototype computer virus that uses AI models to compromise computers and run inference on stolen GPU resources. S003
- The worm uses open-weight LLMs on a single local GPU, with no reliance on vendor APIs, and achieves ~80% success on vulnerability detection, ~53% on exploitation, and 88% on self-replication, for ~37% full-attack success. S003
- The worm operates in a decentralized swarm, with no single point of control, and uses a reasoning graph with specialized nodes like Plan, Judge, Action, Summary, and Progress. S003
Analysis. This proof-of-concept demonstrates that AI-driven worms are no longer theoretical, posing a significant threat to internet infrastructure. The use of open-weight models makes such attacks accessible and hard to monitor.
Implication. Organizations must prepare for autonomous cyber threats, potentially requiring AI-based defense agents to counter these worms.
Uncertainty. The full details of the reasoning graph and the specific LLM used are redacted or undisclosed.