It was bound to happen — researchers have created a 1st generation AI worm that can steal data, propagate malware, and spread via email.

Ben Nassi from Cornell Tech, Stav Cohen from the Israel Institute of Technology, and Ron Bitton from Intuit created the self-replicating worm and bestowed the name ‘Morris II’ after the notorious worm that infected systems in the 1980’s. Their creation targets AI apps and AI-enabled email assistants. They published a research paper and video showing methods to steal data and affect others email systems.

This worm basically embeds adversarial type data into malicious email that manipulates victim’s systems to propagate messages, perform malicious activity, and exfiltrates sensitive data.

Strategically, the crux of this evolving problem is based in the fact that the pursuit of more functionality and subsequent value of GenAI and LLM systems, they require more access and permissions to do things in the digital ecosystems they inhabit. So, they become an incredibly powerful tool for both good and also for bad if instructed by malicious parties.

So, take a breath! This is just the beginning!

We must all understand that we can seize the great benefits of disruptive technologies, like Artificial Intelligence, but we must also be responsible to proactively understand and mitigate the accompanying cybersecurity risks! 

*** This is a Security Bloggers Network syndicated blog from Information Security Strategy authored by Matthew Rosenquist. Read the original post at: https://infosecstrategy.blogspot.com/2024/03/researchers-give-birth-to-first-genai.html