What does the world's first AI worm mean for you?

Hindustan Times

07-06-2025

The Creeper program is generally considered the world's first computer virus. Born as an experiment in 1971, it infected computers and slowed operations to a crawl. Reaper was the world's first antivirus, designed to destroy it.
The battle has waged on ever since.
There was the Brain virus from 1986, which spread through floppy disks and flashed alarming messages of infection on home computers (while also slowing them down). Then came the Morris Worm, a self-replicating program created at Cornell University, as part of an unofficial experiment, in 1988. It swept the world, slowing computers down to such a degree that a single email could take days to send.
Fast-forward to 2024, and a new beast has emerged, from a joint experiment conducted by Cornell, the Technion-Israel Institute of Technology and the software company Intuit. Named Morris II, it is being called the world's first generative AI worm.
The self-replicating bug has shown the ability to spread rapidly through AI-powered email, and target generative AI platforms such as ChatGPT and Google Gemini.
The way it creeps around is quite sinister. It essentially hides, somewhat like a shadow, in common chatbot and AI assistant prompts. When this prompt is issued by a generative AI model, and accepted by a user, it triggers a shadow instruction alongside. The shadow prompt may instruct the AI program to hand over data, alter code, or help the worm itself replicate.
Additionally, any time such a prompt is used to create an email or other such output, the worm spreads seamlessly to every recipient of that content.
Morris II isn't out there prowling yet. Researchers Ben Nassi, Stav Cohen and Ron Bitton created it in a controlled environment for the same reason many of their predecessors did this: to highlight levels of risk, and raise an alarm.
The really alarming thing, this time around, is that the worm may wreak its damage invisibly, without the user ever knowing it was there. It could also potentially 'learn' as it goes, finding new ways to infiltrate systems, and evade detection.
In a report released in April, cyber-security company Check Point Software has already noted that AI-driven malware could exploit vulnerabilities in real time, making traditional signature-based antivirus tools nearly obsolete.
This cat-and-mouse game isn't new. Traditional worms such as WannaCry, the ransomware that first appeared in 2017, cost billions in damages across hospitals, banks and governments, in this way. But AI raises the stakes
Track and shield
Unsurprisingly, security firms are already racing to harness AI to outsmart AI. Amid this race, consultancy firm McKinsey estimates that cybersecurity solutions, which companies around the world spent about $150 billion on in 2021, could soon be a market worth as much as $2 trillion.
Among the weapons emerging on the good side, in this battle, are virtual private networks or VPNs. In addition to anonymising a user's web-browsing data and providing a layer of security for information sent and received, companies such as ExpressVPN, Proton and Nord are evolving to offer clients solutions that will protect not just smartphones and computing devices but also smart TVs, appliances and home systems.
ExpressVPN, for instance, rolled out an 'AI shield' late last year that uses artificial intelligence to predict and neutralise zero-day exploits (which is when a new bug or vulnerability in a system is exploited, in the hours before it is fixed).
Traditional antivirus companies are responding to the shifting landscape too. Market leaders such as McAfee and Norton are working to provide advanced AI-led protection against AI-led threats, with a special focus on text messages, phone calls, email and web browser use.
We aren't at the point of dos and don'ts yet. It is still unclear what the threats may look like. But watch this space. It will pay to know all you can.
Because this time, it may not even take a click from you to change your world.