JAKARTA - Ransomware attacks are entering a new, more sophisticated and worrying phase, along with the increasing use of artificial intelligence (AI) technology.
To see the current and future ransomware trends, global cybersecurity firm Kaspersky released a recent report, in line with the commemoration of Anti-Ransomware Day.
One example of current ransomware attacks is such as that of FunkSec, a ransomware group that emerged at the end of 2024 that quickly gained fame beyond established groups such as Cl0p and RansomHub.
Kaspersky found that the group operates under the Ransomware-as-a-Service (RaaS) model, which uses multiple extortion tactics, which target the governments, technology, finance and education sectors in Europe and Asia.
What distinguishes FunkSec is the extensive use of AI. Their code shows signs made by a large language model (LLM), complete with neat comments, signaling high-level automation in detection development and avoidance.
Instead of demanding a large ransom, FunkSec relies on high-attack volume with low ransom demands, demonstrating operating efficiency thanks to AI.
Similar trends are also seen across the RaaS landscape, which makes it easier for inexperienced actors to launch sophisticated attacks.
In 2025, Kaspersky estimates ransomware will develop by exploiting unconventional vulnerabilities, such as IoT devices, smart equipment, and webcams, as shown by Akira's gang.
In addition, LLM proliferation specifically designed for cybercrime will also further strengthen the reach and impact of ransomware.
SEE ALSO:
LLMs marketed on the dark web lower technical barriers to making malicious codes, phishing campaigns, and social engineering attacks, allowing less skilled actors to create very convincing baits or automate the spread of ransomware.
"In order to remain safe, organizations require layered defense: the latest systems, network segmentation, real-time monitoring, strong backups, and sustainable user education," commented Dmitry Galov, Head of Research Center for Russia and CIS at GREAT Kaspersky.
In addition, building cyber awareness at every level is as important as investing in the right technology.
The English, Chinese, Japanese, Arabic, and French versions are automatically generated by the AI. So there may still be inaccuracies in translating, please always see Indonesian as our main language. (system supported by DigitalSiber.id)
