Definition
An AI worm is a self-propagating prompt-injection payload that copies itself into new artifacts (documents, messages) produced by an LLM workflow, enabling infection of downstream trusted contexts without classic malware macros.
Key Points
- 2026-07: Demonstrated in microsoft-copilot for Word by hakon-maloy — hidden white-text instructions alter content and re-embed into new files
- Not an in-the-wild outbreak claim; class-level vulnerability with reproducible PoC under coordinated disclosure
- Distinct from malware worms: propagation requires Copilot-assisted workflows ingesting carrier docs