Artificial Intelligence is Taking Cybercrime to a New Level

A worrying trend has emerged in the cybersecurity landscape. While ransomware has been a primary threat for a decade, the development of artificial intelligence (AI) has made these attacks more accessible and widespread. Experts estimate that approximately 3,000 attacks were recorded globally over the summer, representing a 20 to 40 percent increase compared to the spring.

Artificial Intelligence as a Criminal Tool

Although fully autonomous, AI-driven ransomware has not yet been created, criminals are actively using the technology in specific stages of the attack chain. It is particularly effective for generating phishing emails and refining the negotiation process. For instance, Japan has seen a sharp rise in fraud, as AI has allowed criminals to generate high-quality, natural-sounding Japanese text—a feat that was previously difficult for them to achieve.

Cybersecurity analysts state that "successful" groups are still managed by humans, but AI experiments are rapidly changing this picture. The technology allows even inexperienced individuals to form their own criminal groups and conduct complex attacks.

New Players and 'Lone Wolves'

Traditionally, the ransomware market was dominated by a few large groups, but the ecosystem has now become fragmented. Between July and September, various analytical data suggest that approximately 111 groups claimed responsibility for attacks. Some of these, such as "Global Secret Group" or "Storm," report compromising dozens of companies in just a few weeks.

Specialists note that instead of the "Ransomware-as-a-Service" model, we are increasingly seeing "lone wolves." One security firm identified a case where a teenager, assisted by AI, earned more than $800,000 in less than two weeks. However, experts warn that such "quick startups" often burn out quickly because they lack the institutional knowledge of experienced groups.

What Awaits Businesses in the Future?

This year, the number of attacks has already exceeded the total for last year. Interestingly, attackers are increasingly choosing to only exfiltrate (steal) data rather than encrypt systems, which simplifies their operations and involves less risk.

For businesses, this means that cybersecurity audits and raising employee awareness regarding phishing attacks are becoming more urgent priorities. When criminals have access to cheap and effective AI tools, the defensive line can no longer be limited to technical barriers alone.