The Emergence of Ransomware Generated by AI

Certain ransomware factions are incorporating AI into their activities, although it remains uncommon, as stated by Allan Liska from Recorded Future. AI is primarily utilized for securing initial access instead of malware creation. ESET analysts discovered an AI-enhanced ransomware known as PromptLock, which leverages OpenAI’s model to generate harmful scripts, examine files, extract data, and encrypt information. While it is not in active use, it indicates that cybercriminals are introducing AI into their arsenal. ESET’s Anton Cherepanov and Peter Strycek highlight the hurdles that AI-facilitated ransomware faces due to the size of models and the demands for computing power, yet they expect more advanced threats as development progresses. Anthropic indicates that cybercriminals are swiftly adopting AI into their operations, with a group labeled GTG-2002 employing AI for target identification, network infiltration, malware creation, data extraction, and ransom note generation. This group impacted at least 17 organizations across various industries last month, underscoring AI’s significance in the advancement of cybercrime.