First known AI-powered ransomware uncovered by ESET Research
ID: be7e7b71-8b8c-523a-bda8-0e6a093322d6
STIX ID: report--be7e7b71-8b8c-523a-bda8-0e6a093322d6
Feed Name: WeLiveSecurity (ESET Research)
Threat Score
ESET researchers discovered PromptLock, described as the first known AI-powered ransomware proof-of-concept that uses a local gpt-oss-20b model via the Ollama API to generate and execute Lua scripts for filesystem enumeration, data exfiltration, and encryption; Golang Windows and Linux samples were uploaded to VirusTotal and several SHA-1 IoCs are provided, but the malware has not been observed in active attacks.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.