# Malware Indicator of Compromise in Agent Content

- **Severity:** Critical
- **Signature ID:** `77a8b9c0-d1e2-4f34-5678-a9b0c1d2e3f4`
- **MITRE ATLAS:** AML.T0072 (Reverse Shell), AML.T0090 (OS Credential Dumping), AML.T0050 (Command and Scripting Interpreter), AML.T0053 (AI Agent Tool Invocation)
- **OWASP:** ASI07 (Unsafe Autonomous Code Execution), ASI02 (Tool Misuse and Exploitation)

## Summary

This rule flags when an AI agent's tool calls, executed commands, or written files contain text patterns that match known malware. It's a way to catch cases where an agent has been tricked into running or creating malicious code, or where an attacker is using the agent as a vehicle to deploy malware.

## How the attack works

An attacker manipulates or compromises an AI agent so it executes a command, calls a tool, or writes a file. That content contains recognizable strings tied to known malicious behavior: reverse shell setup, persistence mechanisms, keylogging code, ransomware routines, command-and-control communication, or credential-stealing logic. The rule matches this content against a set of known indicator strings drawn from public malware signature databases. A match means the agent's output resembles established malware families rather than benign code.

## Why it matters

If missed, an organization's AI agent could be used to establish remote access, steal credentials, log keystrokes, or deploy ransomware — turning an automation tool into an attack foothold inside the environment.

## What you can do

- Review any flagged agent action manually before assuming it is malicious; legitimate security testing can trigger the same patterns.
- Restrict agent tool permissions so it cannot execute arbitrary shell commands or write files outside a controlled workspace.
- Isolate environments used for malware research or red-team work from production agent deployments so alerts can be triaged separately.
- Log and retain full agent command/output history so a flagged match can be investigated with context, not just the matched string.

## Known benign look-alikes

- Security research tools performing authorized red-team operations
- Malware analysis environments running samples in controlled settings

---
Source: https://www.netzilo.com/threats/malware-ioc