AI-powered ransomware is real and in the wild

As if there weren't enough privacy concerns in the world, AI ransomware is now reportedly a thing.

Cybersecurity firm ESET said that it discovered the first-ever AI-powered ransomware, which it has dubbed PromptLock. "The PromptLock malware uses the gpt-oss:20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts on the fly, which it then executes," the company wrote.

The ransomware, according to ESET, runs locally on devices via an API, meaning OpenAI cannot detect and alert that ransomware is operating. The AI-powered ransomware can generate scripts that perform functions on the devices while evading defensive tools because the AI-generated results are different each time.

"Based on the detected user files, the malware may exfiltrate data, encrypt it, o