---
title: "Toronto Researchers Built an AI Worm That Hacked Two-Thirds of a Network Alone"
subtitle: "Researchers at U of Toronto built an AI worm that exploited 73.8% of a test network autonomously, using stolen GPU compute and open-weight LLMs — no cloud APIs required."
url: "https://alphasignal.ai/news/toronto-researchers-built-an-ai-worm-that-hacked-two-thirds-of-a-network-alone"
author: "AlphaSignal Newsroom"
author_url: "https://alphasignal.ai/editorial-team"
company: "AlphaSignal"
company_url: "https://alphasignal.ai/company/alphasignal"
published: "2026-06-02T00:00:00.000Z"
updated: "2026-06-10T14:27:19.631Z"
type: "Paper"
topics:
  - "Security"
  - "Agents"
subtopics:
  - "Red Teaming"
  - "Computer Use"
  - "Agent Frameworks"
upvotes: 14
source_url: "https://arxiv.org/abs/2606.03811"
comments: 0
truncated: true
---

# Toronto Researchers Built an AI Worm That Hacked Two-Thirds of a Network Alone

> Researchers at U of Toronto built an AI worm that exploited 73.8% of a test network autonomously, using stolen GPU compute and open-weight LLMs — no cloud APIs required.

A team of researchers from the University of Toronto, the Vector Institute, and the University of Cambridge has built and tested a [proof-of-concept AI-driven computer worm](https://arxiv.org/abs/2606.03811) that does something no malware has done before: it reasons about each machine it encounters, generates a custom attack strategy on the fly, and then replicates itself onto the compromised host to continue spreading. This is not a theoretical exercise. The worm ran for seven days, fully autonomously, and compromised nearly two-thirds of a simulated corporate network.

## Why traditional worms are a solved problem , and why that's about to change

Unlike a traditional computer virus, which needs a human to be duped into opening an infected file, worms can infect devices entirely on their own by exploiting security vulnerabilities and replicating copies of themselves along the way. The classic defense is straightforward: identify the specific vulnerability the worm uses, patch it, and the spread stops. WannaCry and NotPetya both worked this way. They were devastating, but they were also finite , once the exploit was known, the fix was known.

An AI-driven worm breaks that model entirely. Researchers built and tested a proof-of-concept AI-driven worm that does not operate on a fixed list of exploits. Instead, it analyzes each target it encounters, reasons about how to attack it, and creates a strategy on the fly, all with the help of a small, free large language model running directly on machines it has already compromised. Patching one vulnerability does not stop it , the worm will simply try a different approach on the next target.

## The parasitic compute trick that makes this economically terrifying

The most unsettling design choice is how the worm handles its own computational needs. Running an LLM requires serious hardware , typically a GPU with tens of gigabytes of memory. Rather than relying on a cloud API (which could be monitored, rate-limited, or shut down), the researchers built the worm around a single open-weight LLM that runs locally on a compromised GPU. Once the worm compromises a GPU-equipped server, it deploys a local copy of the model.

This creates a self-funding attack loop. Every new GPU-equipped machine the worm compromises becomes a new reasoning node, expanding the worm's capacity to attack more targets. The most significant aspect is not that the prototype exists, but how it works: it does not rely on cloud APIs, does not need a centralized infrastructure, and does not depend on OpenAI, Google, Anthropic, or any other vendor. The attacker's marginal cost per new infection is effectively zero , the victims are paying for their own compromise.

_Preview only. Full text requires an AlphaSignal Pro account._

## Sources

- [AI Agents Enable Adaptive Computer Worms (arXiv)](https://arxiv.org/abs/2606.03811)
- [Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models — The Hacker News](https://thehackernews.com/2026/06/researchers-build-self-replicating-ai.html)
- [AI-Powered Worm Leverages Stolen Compute to Target Linux, Windows, and IoT Devices — GBHackers](https://gbhackers.com/ai-powered-worm-leverages-stolen-compute-devices/)
- [Autonomous AI-driven worm can reason its way through corporate networks — Help Net Security](https://www.helpnetsecurity.com/2026/06/03/autonomous-ai-worm-prototype/)
- ['A Fundamentally New Threat': Researchers Develop New AI-Powered Worm — Gizmodo](https://gizmodo.com/a-fundamentally-new-threat-researchers-develop-new-ai-powered-worm-that-might-be-unstoppable-2000766975)