Unit 42 Finds 97% of AI-Enabled Malware Samples Never Left the Sandbox

405 malware samples that integrate AI capability, drawn from VirusTotal, public research, and Cortex XDR telemetry

Palo Alto Networks Unit 42 published the first large sizing of how much AI-enabled malware is actually operational. Of 405 samples examined, roughly 97% existed only in sandboxes and on VirusTotal; 12 samples, about 3%, appeared on protected endpoints across three countries. The non-operational remainder sorted into proof-of-concept research code, security validation submissions, and AI-themed brand abuse in which malware borrows AI naming without containing any AI functionality. The families seen in production were FunkSec ransomware (seven Rust variants, partially LLM-generated), a trojanized AI application called RecipeLister carrying a JavaScript backdoor and affecting more than 50 organizations, the Oyster/CleanBoost backdoor delivered through a fake Dropbox installer, Rhadamanthys stealer, and a COM-hijacking persistence DLL. Unit 42's conclusion is that AI raises authoring velocity without producing novel evasion, and that "existing behavioral detection, cloud-based sandboxing and endpoint analytics catch these threats using the same mechanisms that stop conventional malware"

Not an incident. Recorded as the counterweight to the year's agentic-attack disclosures: the autonomous intrusion campaigns listed above are real and the AI-written malware market around them is mostly noise, and telling the two apart matters for prioritization