Malware Prototype with Embedded Prompt Injection Discovered

# Malware Prototype with Embedded Prompt Injection Discovered

https://gcdradar.vercel.app/incidents/malware-prototype-with-embedded-prompt-injection-discovered · AIR-2025-0068 · closed 2026-01-07

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2025-12-24 (happened 2025-06-25)
- AI role: AI-enabled attack
- Products: Skynet malware

## Summary

A prototype malware sample called Skynet was found containing prompt injections intended to manipulate LLM-based analysis tools. The prompt injection proved ineffective, and the malware logic remained incomplete.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-12-24: In the Wild: Malware Prototype with Embedded Prompt Injection (https://research.checkpoint.com/2025/ai-evasion-prompt-injection)
- 2025-12-24: Malware Prototype with Embedded Prompt Injection (https://atlas.mitre.org/studies/AML.CS0043)

## Sources

- 2025-12-24 MITRE ATLAS: Malware Prototype with Embedded Prompt Injection https://atlas.mitre.org/studies/AML.CS0043
- 2025-12-24 research.checkpoint.com: In the Wild: Malware Prototype with Embedded Prompt Injection https://research.checkpoint.com/2025/ai-evasion-prompt-injection

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.