Artificial intelligence experts are advising the public to strengthen their passwords and promptly update software on their devices to counter the threat of “AI-driven computer worms.” These new cyber-threats are capable of launching tailored attacks on various internet-connected devices, such as laptops, printers, and cameras.
Recently, a team from the University of Toronto, in collaboration with the Vector Institute, demonstrated that publicly available AI models can power a worm that can adapt its attack strategy in real-time as it spreads across devices. This research was shared with national science, security, and defense entities before publication.
Nicolas Papernot, an associate professor at U of T, emphasized the importance of proactive cybersecurity measures, urging individuals to regularly update their software and avoid reusing passwords. He highlighted the necessity of multi-factor authentication and swift deployment of software patches by organizations to mitigate risks.
Unlike traditional computer viruses, worms propagate independently between machines without human intervention. The AI-driven worm developed by U of T collects information as it traverses devices, exploiting vulnerabilities and weak passwords to infiltrate new targets. This self-learning capability poses a significant challenge as the worm can adapt and evolve, surpassing conventional defense mechanisms.
Papernot cautioned that these AI-driven worms are not only more sophisticated than previous threats but also cost-effective to build and unleash. This affordability enables hackers to target a larger number of victims, leveraging stolen computing resources from infected devices to launch subsequent attacks seamlessly.
A survey conducted by the Communications Security Establishment (CSE) revealed that while a majority of respondents regularly update software and use complex passwords, there is a lack of consistency in employing unique passwords. Papernot stressed the need for enhanced cybersecurity measures, particularly in safeguarding critical infrastructure exposed to potential cyber threats.
The evolving landscape of AI threats underscores the urgency for individuals and organizations to prioritize cybersecurity hygiene, implement robust defense strategies, and stay vigilant against emerging risks posed by AI-driven cyber threats.