Morris II Self-Replicating GenAI Worm Demonstration

# Morris II Self-Replicating GenAI Worm Demonstration

https://gcdradar.vercel.app/incidents/morris-ii-self-replicating-genai-worm-demonstration · AIR-2025-0050 · closed 2025-03-28

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2025-03-14 (happened 2024-03-05)
- AI role: Attack on AI
- Products: Morris II, RAG systems

## Summary

Researchers built Morris II, a zero-click worm that propagates through connected generative AI and RAG email systems using adversarial prompts. The demonstration highlighted risks of autonomous prompt injection spread.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-03-14: Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications (https://arxiv.org/abs/2403.02817)
- 2025-03-14: Morris II Worm: RAG-Based Attack (https://atlas.mitre.org/studies/AML.CS0024)

## Sources

- 2025-03-14 MITRE ATLAS: Morris II Worm: RAG-Based Attack https://atlas.mitre.org/studies/AML.CS0024
- 2025-03-14 arXiv: Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications https://arxiv.org/abs/2403.02817

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.