Research · curated 16 Jul 2026
AI-Generated PowerShell Malware: An Experimental Framework and Dataset
First reported arxiv.org
Coverage timeline
Single-source research — first reported, latest, and curated coincide.
Why it matters
AI-generated PowerShell malware research demonstrates that open-weight LLMs can produce malware behaviorally similar to real-world samples, giving defenders both evidence of the offensive potential and a dataset to train detection and evaluation.
Researchers Pianese, Orbinato, Liguori, and Natella present an experimental framework (arXiv:2606.30819) to assess LLM-generated PowerShell malware, including a novel sandbox for dynamic analysis and a manually curated, natural-language-annotated dataset of real-world PowerShell malware. Their evaluation of permissive open-weight LLMs adapted for malware generation found high similarity between real and AI-generated malware, with a median Jaccard index of 84.5% for triggered OS malicious events.