Ransomware gangs experiment with AI
Add Axios as your preferred source to
see more of our stories on Google.
Illustration: Maura Losch/Axios
A ransomware gang is using AI chatbots to negotiate with their victims, according to research from Picus Security.
Why it matters: It's the latest example of how even the bad guys are using AI-enabled tools to scale their workloads.
Zoom in: Global Group, a new ransomware-as-a-service brand that researchers uncovered last month, has been directing victims to talk to an AI chatbot to negotiate their ransom payments.
- The chatbot is designed to "automate communication and apply psychological pressure," Picus Security found, including by increasing ransom demands and sending threats.
- Chat transcripts reviewed by Picus show the chatbots demanding upward of $1 million at a time from victims.
Yes, but: Human hackers can still review what the chatbot is saying and decide what deadlines victims must follow to avoid seeing their stolen data leaked online, according to the report.
The big picture: Ransomware gang members are experimenting with AI-enabled tools in all aspects of their attacks, including coding and social engineering, Allan Liska, a threat intelligence analyst at Recorded Future, told Axios.
- "Just as in the tech world, some groups are heavily focused on AI while others are waiting to see how it's being used and then copying the successful strategies of other groups," Liska said.
What to watch: This is only the beginning. Security experts have been increasingly warning of AI agents carrying out a detrimental cyberattack within the next year.
