logo

The future is here: AI-borne ransomware has arrived

ID: 1a95a9ff-5423-5a8e-8a0b-cb7e461f11e2

STIX ID: report--1a95a9ff-5423-5a8e-8a0b-cb7e461f11e2

Feed Name: ReversingLabs Blog

Threat Score
35/100

Date Published: 2025-09-02

Date Updated: 2026-04-29

Author: John P. Mello Jr.

...
...

PromptLock is an early proof-of-concept ransomware identified by ESET that embeds prompts to a locally hosted open-weights LLM (gpt-oss:20b) to dynamically generate Lua scripts for file discovery, exfiltration, and SPECK-128 encryption; while not observed in active attacks, researchers warn it demonstrates how AI can enable adaptive, harder-to-detect ransomware and could be copied or evolved into operational threats.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.