Evaluating Malicious Generative AI Capabilities