Adaptive Agentic AI Worms: Defending Against Autonomous Self-Replicating Malware

---
title: Potential Agentic AI Worm - Email Propagation
id: 8a5d2e41-1f9c-4b7a-9c3e-2d4a5f6b7c8d
status: experimental
description: Detects suspicious activity where GenAI SDK processes (Python/Node) interact with email clients or send network traffic, potentially indicating a self-replicating AI worm.
references:
  - https://www.darkreading.com/cyber-risk/adaptive-agentic-ai-worms-enterprise-cyber-threat
author: Security Arsenal
date: 2026/04/15
tags:
  - attack.execution
  - attack.t1204
logsource:
  category: process_creation
  product: windows
detection:
  selection_ai:
    Image|endswith:
      - '\python.exe'
      - '\python3.exe'
      - '\node.exe'
    CommandLine|contains:
      - 'openai'
      - 'langchain'
      - 'anthropic'
  selection_suspicious_action:
    CommandLine|contains:
      - 'smtp'
      - 'sendmail'
      - 'Outlook.Application'
      - 'requests.post'
  condition: all of selection_*
falsepositives:
  - Legitimate development testing of AI email integrations
level: high
---
title: Adversarial Prompt Injection - Suspicious File Generation
id: 9b6e3f52-2a0d-5c8b-0d4f-3e5b6g7c8d9e
status: experimental
description: Detects AI processes rapidly generating or modifying files, a behavior consistent with an autonomous worm creating propagation payloads.
references:
  - https://www.darkreading.com/cyber-risk/adaptive-agentic-ai-worms-enterprise-cyber-threat
author: Security Arsenal
date: 2026/04/15
tags:
  - attack.impact
  - attack.t1565.001
logsource:
  category: file_create
  product: windows
detection:
  selection:
    Image|endswith:
      - '\python.exe'
      - '\node.exe'
    TargetFilename|contains:
      - '\AppData\Local\Temp'
      - '\Downloads'
  filter_volume:
    # Filter out high-volume legitimate temp writes unless pattern matches payload extension
    TargetFilename|endswith:
      - '.txt'
      - '.py'
      - '.js'
      - '.eml'
  condition: selection and filter_volume
falsepositives:
  - High-frequency data processing scripts
level: medium

DeviceProcessEvents
| where Timestamp > ago(1d)
// Identify AI wrapper processes
| where ProcessCommandLine has_any ("openai", "langchain", "anthropic", "tiktoken", "transformers") 
// Check for child processes that imply agentic action (networking, scripts)
| where InitiatingProcessFileName has_any ("python.exe", "node.exe", "python3.exe")
| where FileName in~ ("powershell.exe", "cmd.exe", "curl.exe", "wget.exe", "nslookup.exe")
| project Timestamp, DeviceName, AccountName, FileName, ProcessCommandLine, InitiatingProcessFileName, InitiatingProcessCommandLine
| order by Timestamp desc

-- Hunt for AI SDK binaries with active network connections
SELECT Pid, Name, CommandLine, Exe, Username
FROM pslist()
WHERE Name =~ 'python' OR Name =~ 'node'
AND CommandLine =~ '(openai|langchain|anthropic)'

-- Correlate with network connections
SELECT Pid, Family, RemoteAddress, RemotePort, State
FROM netstat()
WHERE Pid IN (
    SELECT Pid 
    FROM pslist() 
    WHERE Name =~ 'python' OR Name =~ 'node'
)
AND Family =~ 'AF_INET'

# Audit for exposed AI API Keys in Environment Variables
$RiskVars = @("OPENAI_API_KEY", "ANTHROPIC_API_KEY", "HUGGINGFACE_TOKEN", "AZURE_OPENAI_KEY")
$FoundRisks = @()

foreach ($var in $RiskVars) {
    $val = [Environment]::GetEnvironmentVariable($var, "User")
    if (-not [string]::IsNullOrEmpty($val)) {
        $FoundRisks += [PSCustomObject]@{
            Variable = $var
            Location  = "User Environment"
            Status    = "Exposed"
        }
    }
    $val = [Environment]::GetEnvironmentVariable($var, "Machine")
    if (-not [string]::IsNullOrEmpty($val)) {
        $FoundRisks += [PSCustomObject]@{
            Variable = $var
            Location  = "System Environment"
            Status    = "Exposed"
        }
    }
}

if ($FoundRisks.Count -gt 0) {
    Write-Warning "Security Alert: AI API Keys found in environment variables. Agentic worms may leverage these for autonomous propagation."
    $FoundRisks | Format-Table -AutoSize
} else {
    Write-Host "No common AI API keys found in environment variables." -ForegroundColor Green
}

# Check for active Python/Node processes potentially running agents
$aiProcesses = Get-Process -Name "python", "python3", "node" -ErrorAction SilentlyContinue

if ($aiProcesses) {
    Write-Host "Active AI Runtime processes detected. Review command lines for agentic behavior:" -ForegroundColor Yellow
    Get-CimInstance Win32_Process | Where-Object { $_.Name -match "python|node" } | Select-Object Name, CommandLine
} else {
    Write-Host "No active Python/Node runtimes detected."
}