- 80% of ransomware -attacks are now driven by artificial intelligence tools
- AI enables the creation of malware, phishing campaigns and deepfake-driven social engineering attacks
- Llms auxiliary products cracking, automated codgering and captcha bypass
AI is increasingly used to create malware, phishing campaigns and Deepfake-driven social technology, such as false customer service calls.
According to new research from my Sloan and safe security, where they investigated 2,800 ransomware attacks, 80% of these attacks were driven by artificial intelligence.
Large language models can now enable password cracking, CAPTCHA BYPASS and automated code generation, showing how AI tools reshape the pacifier landscape.
The asymmetric challenge of cyber security
Experts warn that AI allows attackers to operate at an unprecedented speed and scale, creating challenges for traditional malware removal techniques.
Michael Siegel, main scientist at Cams, notes “that the striker only needs one point of entry and exploitation, while the defender must stop all entry points and be resistant to all exploits.”
This imbalance deteriorates as AI accelerates both attacks and defense methods.
Well-known forms of cyberattack, including ransomware and phishing, develop into more advanced AI-driven variants.
Organizations must consider that although defense can adapt, attackers who use AI have an advantage of utilizing weak points faster than human teams can respond.
Combating AI-driven ransomware requires more than AI-run tools alone.
Researchers recommend a proactive, multilayer’s approach that combines human supervision, control framework, AI-driven simulations and real-time intelligence sharing.
The first column involves automated security hygiene, including self-healing code, self-patching systems, zero-unillenizing architectures and continuous attack surface monitoring.
The second focuses on autonomous and misleading defense systems that use analysis, machine learning and real -time data to anticipate and counteract threats.
Techniques such as automated motion target and misleading information allow security teams to act proactively.
The third is reinforced supervision and reporting, giving leaders real -time insight into new threats to guide decisions and answers.
Based on the three defense columns, organizations can take concrete steps to strengthen the protection of ransomware.
As AI becomes more and more integrated into cyber attacks, the proportion of ransomware driven by AI is expected to rise further by 2025.



