logo

The crazy, true story behind the first AI-powered ransomware

ID: d79e44ed-a8e7-5fd8-bc4f-224a09790dd9

STIX ID: report--d79e44ed-a8e7-5fd8-bc4f-224a09790dd9

Feed Name: The Register (Security)

Threat Score
35/100

Date Published: 2025-09-05

Date Updated: 2026-04-26

Author: Jessica Lyons

...
...

NYU researchers developed a proof-of-concept named Ransomware 3.0 showing how large language models can autonomously perform multiple ransomware lifecycle tasks—file discovery, targeted encryption, polymorphic payload generation, and personalized ransom notes. The lab-only binary was uploaded to VirusTotal and subsequently misreported as a real AI-powered ransomware (PromptLock) by third parties; the researchers and ESET clarified the sample is not operational outside a controlled environment, but the work highlights a realistic and concerning evolution of AI-assisted ransomware techniques.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.