{"id":37165,"date":"2026-10-13T07:37:45","date_gmt":"2026-10-13T06:37:45","guid":{"rendered":"https:\/\/www.digife.it\/?p=37165"},"modified":"2026-10-13T07:38:47","modified_gmt":"2026-10-13T06:38:47","slug":"worms-are-malware-that-spreads-across-the-network","status":"publish","type":"post","link":"https:\/\/www.digife.it\/en\/worms-are-malware-that-spreads-across-the-network\/","title":{"rendered":"AI worm: Malware that adapts as it spreads across the network"},"content":{"rendered":"<h1>AI worm: Malware that adapts as it spreads across the network<\/h1>\n<p><b>Researchers at the University of Toronto have demonstrated in the laboratory a worm capable of using AI models to analyze each new device, choose an attack strategy, and exploit compromised machines to continue spreading.<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A traditional worm already knows the path it has to follow.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It identifies a specific vulnerability, exploits it, and attempts to replicate itself on other devices on the network.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The prototype developed by a group of researchers from the\u2019<\/span><a href=\"https:\/\/www.utoronto.ca\/news\/u-t-researchers-demonstrate-ai-worm-could-target-any-online-device?trk=article-ssr-frontend-pulse_little-text-block\" target=\"_blank\" rel=\"noopener\"><b>University of Toronto<\/b><\/a><span style=\"font-weight: 400;\"> change this logic.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Their <\/span><b>AI worm<\/b><span style=\"font-weight: 400;\"> It doesn&#039;t rely on a single, pre-established vulnerability. It uses open-weighted language models to analyze the device it encounters, assess available weaknesses, and build a different strategy based on the target.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The research was conducted exclusively in a digital laboratory isolated from the outside world. Therefore, it does not reveal an active malware campaign, but rather demonstrates a new potential threat class.<\/span><\/p>\n<h2><b>What is a computer worm?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">A <\/span><b>worm<\/b><span style=\"font-weight: 400;\"> It is malware designed to propagate autonomously from one device to another.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Unlike many other threats, it does not necessarily require a user to continually open attachments or install programs.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Once inside the network, it looks for other vulnerable systems and tries to replicate itself.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Traditionally, this behavior is linked to a specific technique.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If the worm is programmed to exploit a certain vulnerability, patching that flaw can stop much of its propagation.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The prototype developed by Canadian researchers instead introduces a level of adaptation.<\/span><\/p>\n<h2><b>The AI worm doesn&#039;t always use the same attack<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The work, published under the title <\/span><b>AI Agents Enable Adaptive Computer Worms<\/b><span style=\"font-weight: 400;\">, shows a worm that generates specific strategies based on the device encountered.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The system can observe the new environment and look for several weak points:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">known vulnerabilities not fixed;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">incorrect configurations;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">weak credentials;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">information recovered from already compromised devices.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">The worm can then change its behavior as it propagates.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If one technique doesn&#039;t work on a computer, you can try another.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If it finds a password during an infection, that same information can be used to attempt to access a subsequent device.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Malware no longer just follows a fixed script.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Start to <\/span><b>think about the target<\/b><span style=\"font-weight: 400;\">.<\/span><\/p>\n<h2><b>PCs, servers and IoT devices can become different targets<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The researchers tested the prototype on a controlled network of different systems, including Linux, Windows, and IoT devices.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This point is important because a corporate network rarely consists of only identical computers.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The following may be present:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">workstation;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">server;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">printers;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">video cameras;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">industrial devices;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">control systems;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">IoT devices.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">A traditional worm might find the same vulnerability on only part of the network.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Adaptive malware can instead look for a different path for each category of device.<\/span><\/p>\n<h2><b>The malware uses the computing power of compromised machines<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The research also shows another significant element.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Once inside a device, the worm can use the machine&#039;s available computing power to run the AI model needed to plan subsequent attacks.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In practice, each new compromised device can simultaneously become:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">a victim;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">a source of information;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">a computing resource;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">a starting point for the next attack.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Researchers describe this behavior as <\/span><b>parasitic<\/b><span style=\"font-weight: 400;\">: The malware uses the resources of the infrastructure it is compromising to fund its own propagation.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This also reduces the need to continuously rely on external AI services.<\/span><\/p>\n<h2><b>Why open-weight models change the problem<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The prototype does not necessarily require the most powerful commercial AI models.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Researchers show that they can also be used <\/span><b>open-weight models<\/b><span style=\"font-weight: 400;\">, that is, models whose parameters can be downloaded and executed locally.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This has an important consequence.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Centralized controls such as:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">provider filters;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">refusal of certain requests;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">usage limits;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">account suspension;<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">may become less effective if the model is run directly on compromised machines.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The security issue therefore shifts from access to the model to protecting the infrastructure.<\/span><\/p>\n<h2><b>This does not mean that all computers are already vulnerable.<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The demonstration should not be transformed into a general alarm.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The prototype was tested in a controlled environment and built specifically for research.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The researchers also shared their work publicly only after removing details that could have facilitated the technique&#039;s offensive use and after consulting with scientific and security institutions.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The value of the study therefore lies above all in anticipating a risk.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It shows that the combination of AI agents and autonomous malware can enable less rigid attacks that are more capable of adapting to the conditions encountered.<\/span><\/p>\n<h2><b>The defense cannot rely on a single correction<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">With a classic worm, a patch can close the main vulnerability exploited for propagation.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">With malware that can try different paths, this approach becomes less sufficient.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Protection must cover the entire infrastructure.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">An outdated device can offer a way forward.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">A weak password can give you another.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">A poorly presented service can become the next step.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Security is therefore becoming more and more <\/span><b>multilevel<\/b><span style=\"font-weight: 400;\">.<\/span><\/p>\n<h2><b>Updates and credentials remain central<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The fact that the attack uses artificial intelligence does not make traditional measures useless.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">On the contrary.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Professor Nicolas Papernot, head of the research group, underlines the importance of:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">install updates;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">use strong passwords;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">enable multi-factor authentication;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">reduce weak configurations;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">protect every device connected to the network.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">AI makes malware better at looking for opportunities.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The most effective way to limit its action remains to reduce the number of opportunities available.<\/span><\/p>\n<h2><b>What this means for your business<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Research from the University of Toronto shows a possible evolution of attacks: malware that not only executes predefined instructions, but also analyzes the environment and decides autonomously how to proceed.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">For an SME, this means strengthening some already fundamental practices:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">update IoT systems and devices;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">use multi-factor authentication;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">delete unnecessary accounts and services;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">segment the network when possible;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">limit user privileges;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">monitor anomalous behavior and traffic;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">actually know which devices are connected to the infrastructure.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Artificial intelligence doesn&#039;t suddenly make all existing defenses obsolete.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">However, it makes it more expensive to leave many small vulnerabilities open at once.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">DigiFe supports companies in<\/span><a href=\"https:\/\/www.digife.it\/en\/it-security\/\"> <span style=\"font-weight: 400;\">IT security<\/span><\/a><span style=\"font-weight: 400;\">, from infrastructure auditing to protecting the services and devices that make up the corporate network.<\/span><\/p>","protected":false},"excerpt":{"rendered":"<p>AI worm: il malware che si adatta mentre si diffonde nella rete Ricercatori dell\u2019Universit\u00e0 di Toronto hanno dimostrato in laboratorio un worm capace di utilizzare modelli AI per analizzare ogni&#8230;<\/p>","protected":false},"author":4,"featured_media":37166,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,59],"tags":[],"class_list":["post-37165","post","type-post","status-publish","format-standard","has-post-thumbnail","category-curiosita-web","category-notizie"],"_links":{"self":[{"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/posts\/37165","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/comments?post=37165"}],"version-history":[{"count":2,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/posts\/37165\/revisions"}],"predecessor-version":[{"id":37355,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/posts\/37165\/revisions\/37355"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/media\/37166"}],"wp:attachment":[{"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/media?parent=37165"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/categories?post=37165"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/tags?post=37165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}