The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution
Explore Unit 42 research on AI-enabled malware.
Explore Unit 42 research on AI-enabled malware. Learn how existing behavioral detection and endpoint analytics stop AI-authored code before execution. To assess the impact of AI-enabled malware, we collected and analyzed over 400 malware samples that integrate AI in some capacity, from brand impersonation and large language model (LLM)-generated code to agentic execution loops. Our central finding was that the AI malware space is currently overwhelmingly composed of proof-of-concept code, security validation testing and researcher submissions that have never reached a production environment.
According to previous reporting , this sample was part of an AI-enabled infection chain that ultimately delivered this sample of Rhadamanthys stealer. The AI component influenced how the malware was written, but the resulting binary still exhibits the same behavioral indicators that existing detection logic targets.
This intentionally inclusive approach captured everything from LLM-powered ransomware agents to cryptocurrency miners that simply used “ChatGPT” in their filename. These include: Additionally, we found many of these samples in file paths that indicated malware analysis or research. Filenames reference popular AI companies or other AI products, but the payload is conventional malware wrapped in an installer that mimics an AI application. No execution succeeded on a protected endpoint.
Our starting dataset consisted of 405 unique SHA-256 hashes collected from WildFire analysis reports, VirusTotal Intelligence and published open-source intelligence (OSINT) research. We included any sample where AI integration was either a functional component of the malware, a feature of its delivery mechanism or part of its branding. Approximately 97% of AI-enabled malware samples exist only in research repositories, sandbox environments and security validation platforms. A second category comprises samples submitted by breach-and-attack simulation (BAS) platforms and internal security teams.
AI-enabled malware is a real and growing category, but our current defensive frameworks detect and block AI-enabled malware regardless of the role that use of AI played in its development.
What changed
These appear in WildFire and on VirusTotal because organizations deliberately test their detection capabilities against publicly reported AI malware samples.
They frequently come from IP addresses associated with known security testing infrastructure.
We included this sample in the dataset because it was delivered alongside AI-branded lures in campaigns we observed.
Who is affected
They include multiple uploads of the same hash from the same organization within a short time window, often during business hours in a single time zone.
Twelve samples from the dataset appeared on Cortex XDR-protected endpoints across organizations in three countries.
Palo Alto Networks customers are better protected from the threats discussed above through the following products, which detected these AI-enabled malware threats out of the box: If you think you may have been compromised or have an urgent matter, get in touch with the Unit 42 Incident Response team or call: Palo Alto Networks has shared these findings with our fellow Cyber Threat Alliance (CTA) members.
Why this matters
According to previous reporting , this sample was part of an AI-enabled infection chain that ultimately delivered this sample of Rhadamanthys stealer.
The AI component influenced how the malware was written, but the resulting binary still exhibits the same behavioral indicators that existing detection logic targets.
The technical picture
This intentionally inclusive approach captured everything from LLM-powered ransomware agents to cryptocurrency miners that simply used “ChatGPT” in their filename.
These include: Additionally, we found many of these samples in file paths that indicated malware analysis or research.
Filenames reference popular AI companies or other AI products, but the payload is conventional malware wrapped in an installer that mimics an AI application.
No execution succeeded on a protected endpoint.
How organizations are responding
Our starting dataset consisted of 405 unique SHA-256 hashes collected from WildFire analysis reports, VirusTotal Intelligence and published open-source intelligence (OSINT) research.
We included any sample where AI integration was either a functional component of the malware, a feature of its delivery mechanism or part of its branding.
Approximately 97% of AI-enabled malware samples exist only in research repositories, sandbox environments and security validation platforms.
A second category comprises samples submitted by breach-and-attack simulation (BAS) platforms and internal security teams.
A third category uses AI branding without meaningful AI integration.
The AI branding is a social engineering tactic, not a technical capability.
What defenders should do now
AI-enabled malware is a real and growing category, but our current defensive frameworks detect and block AI-enabled malware regardless of the role that use of AI played in its development.
What remains unknown
The available reporting does not establish who is behind the activity, if an attacker is involved.