First AI-powered ransomware spotted, but it's not active – yet

ESET researchers identified PromptLock, an AI-powered ransomware proof-of-concept (uploaded to VirusTotal by NYU Tandon) that runs a local LLM (gpt-oss-20b via Ollama) to generate Lua scripts for cross-platform filesystem enumeration, selective data exfiltration, and SPECK-128 encryption; the sample appears non-functional outside contained testing and has not been observed in-the-wild.