Researchers have developed a generative AI worm called Morris II that can steal data and send spam. The Morris II worm uses two methods: a text-based, self-replicating prompt and a self-replicating prompt embedded in an image file. In the first method, the worm uses Retrieval Augmented Generation (RAG) to "poison" an email program's database, allowing it to steal data and infect new hosts when responding to emails. In the second method, a malicious request embedded in an image triggers the email assistant to forward the message, spreading spam, offensive material, or propaganda. The researchers believe that generative AI worms could appear in the wild in the next two to three years.

Support our independent, free-access reporting. Any contribution helps and secures our future. Support now:
Bank transfer
Online journalist Matthias is the co-founder and publisher of THE DECODER. He believes that artificial intelligence will fundamentally change the relationship between humans and computers.
Join our community
Join the DECODER community on Discord, Reddit or Twitter - we can't wait to meet you.