First of a kind Ransomware with an AI Engine discovered by researchers

It was probably inevitable — analysts have spotted the first known ransomware strain powered by Artificial intelligence.  ESET malware researchers Anton Cherepanov and Peter Strycek discovered the emerging strain, which they have named "PromptLock." Although it has not yet been observed in active cyberattacks, the researchers said the PromptLock ransomware appears to be under development and nearly ready to be unleashed onto the threat landscape.

While threat actors have used Generative AI tools to develop malware, PromptLock appears to be the first case of ransomware that uses an AI model as its engine. In a post on LinkedIn, Cherepanov reported that PromptLock leverages the gpt-oss:20b model from OpenAI locally using the Ollama API to be able to create new scripts on the fly and in real time.

In the LinkedIn post, Cherepanov said the ransomware script is currently able to exfiltrate files and encrypt data, and it's in the process of being upgraded to destroy files.

The Future of Cyber Threats and Defense, by Keynote Matthew Griffin

"While multiple indicators suggest that the sample is a proof-of-concept (PoC) or a work-in-progress rather than an operational threat in the wild, we believe it is crucial to raise awareness within the cybersecurity community about such emerging risks," he added.

In a statement the ESET researchers explained how the AI-driven ransomware could pose problems for defenders, "PromptLock uses Lua scripts generated by AI, which means that indicators of compromise (IoCs) may vary between executions," the statement said. "This variability introduces challenges for detection. If properly implemented, such an approach could significantly complicate threat identification and make defenders' tasks more difficult."

Cherepanov and Strycek will continue to dig in on PromptLock but wanted to alert cyber defenders quickly to the threat. In fact, Cherepanov said they shared their findings on social media just 18 hours after samples of the ransomware strain were picked up on VirusTotal.

"We don’t know who created the malware, but we do know that it was uploaded to VirusTotal from the United States," the ESET researchers said in a statement.

In a series of posts on social media platform X, ESET noted that PromptLock is written in the Go programming language and that variants for Windows and Linux systems were both uploaded to VirusTotal. Additionally, ESET noted that the ransomware's Bitcoin address for payments appears to belong to the mysterious Bitcoin creator Satoshi Nakamoto.

AI tools are currently being widely used by threat actors to create compelling phishing content and malicious sites, but applying the technology to power bespoke ransomware in real time presents an entirely new challenge for defenders.

"The rise of AI-powered malware represents a new frontier in cybersecurity," Cherepanov said. "By sharing these findings, we hope to spark discussion, preparedness, and further research across the industry."