03/10/2026
AI Malware: 97% of Samples Never Reached Production
A new analysis of 405 AI-related malware samples found a much smaller real-world footprint than the volume of public samples suggests. Unit 42, Palo Alto Networks' threat research team, found only 12 of the samples on protected production endpoints, while roughly 97% appeared only in research repositories, sandboxes, or security-testing environments.
That does not make AI malware harmless. It points to a more useful distinction: artificial intelligence is already helping attackers create and package malicious software, but the available evidence does not yet show that AI has made those programs unusually difficult for established security controls to detect.
The 405 samples tell a different story from the headlines
Unit 42 built its dataset from 405 unique SHA-256 hashes gathered from WildFire analysis reports, VirusTotal Intelligence, and published open-source research. The researchers deliberately used a broad definition of AI-related malware, including samples where artificial intelligence was part of the malware itself, its delivery mechanism, or simply its branding. That means the dataset includes genuine malicious code alongside proof-of-concept research and conventional malware disguised as AI software.
When the researchers checked those samples against Palo Alto Networks telemetry, only 12 appeared on non-test Cortex XDR-protected endpoints. That represents 3% of the dataset. Another roughly 15 to 20 unique samples appeared in WildFire network sessions, but the researchers found no evidence that the remaining samples reached customer endpoints or crossed customer firewalls.
There is an important limitation here: this is not a measurement of every AI malware sample circulating on the internet. The endpoint and network telemetry covered activity from December 2024 through June 2025 and came from Palo Alto Networks' own visibility. The 97% figure therefore describes this selected dataset and this telemetry, not the percentage of all AI malware worldwide that is harmless or inactive.
https://wiztechnoz.com/blog/ai-malware-97-of-samples-never-reached-production
