- 80% of ransomware attacks are now powered by artificial intelligence tools
- AI enables malware creation, phishing campaigns, and deepfake-driven social engineering attacks
- LLMs help password cracking, automated code generation, and CAPTCHA bypass
AI is increasingly used to create malware, phishing campaigns, and deepfake-driven social engineering, such as fake customer service calls.
According to new research from MIT Sloan[1] and Safe Security, examining 2,800 ransomware attacks, 80% of these attacks were powered by artificial intelligence.
Large language models can now enable password cracking, CAPTCHA bypass, and automated code generation, showing how AI tools[2] are reshaping the threat landscape.
The asymmetric challenge of cybersecurity
Experts warn that AI allows attackers to operate at unprecedented speed and scale, creating challenges for traditional malware removal[3] techniques.
Michael Siegel, principal research scientist at CAMS, notes “that the attacker only needs one point of entry and exploitation while the defender must stop all entry points and be resilient to all exploitations.”
This imbalance is made worse as AI accelerates both attack and defense methods.
Familiar forms of cyberattack, including ransomware and phishing, are evolving into more advanced AI-powered variants.
Organizations must consider that while defenses can adapt, attackers using AI have an advantage in exploiting weak points faster than human teams can respond.
Combating AI-driven ransomware requires more than AI-powered tools alone.
Researchers recommend a proactive, multi-layered approach combining human oversight, governance frameworks, AI-driven simulations, and real-time intelligence sharing.
The first pillar involves automated security hygiene, including self-healing code, self-patching systems, zero-trust architectures, and continuous attack surface monitoring.
The second focuses on autonomous and deceptive defense systems, which use analytics, machine learning, and real-time data to anticipate and counter threats.
Techniques such as automated moving-target defense and deceptive information allow security teams to act proactively.
The third is augmented oversight and reporting, giving executives real-time insights into emerging threats to guide decisions and responses.
Building on the three defense pillars, organizations can take concrete steps to strengthen ransomware protection[4].
As AI becomes increasingly integrated into cyberattacks, the proportion of ransomware powered by AI is expected to rise further in 2025.
You might also like
References
- ^ MIT Sloan (mitsloan.mit.edu)
- ^ AI tools (www.techradar.com)
- ^ malware removal (www.techradar.com)
- ^ ransomware protection (www.techradar.com)