Surge in AI-aided Ransomware Attacks and Emergence of New Groups Including Lone-Wolf Operators
Ransomware attacks have surged by an estimated 20-40% since spring 2026, with around 3,000 incidents posted on leak sites over the summer, driven largely by increased international activity. While fully AI-powered ransomware campaigns have not yet appeared, cybercriminals increasingly use AI, particularly large language models, to improve phishing emails and negotiation tactics. This AI acceleration has also enabled new ransomware groups and lone-wolf operators to emerge rapidly, notably groups like Global Secret Group and Storm, along with the established Gentlemen, Qilin, and Akira. Some independent operators focus more on data extortion rather than encryption, potentially indicating a shift in tactics. Although these newcomers may lack the sustainability and institutional knowledge of established groups, the volume of ransomware incidents continues to rise, with a possible decline in encryption-based attacks but an increase in data extortion threats.
Linha do tempo
-
Surge in AI-aided Ransomware Attacks and Emergence of New Groups Including Lone-Wolf Operators
ler a análise desta fonte ocultar
Ransomware attacks have surged by an estimated 20-40% since spring 2026, with around 3,000 incidents posted on leak sites over the summer, driven largely by increased international activity. While fully AI-powered ransomware campaigns have not yet appeared, cybercriminals increasingly use AI, particularly large language models, to improve phishing emails and negotiation tactics. This AI acceleration has also enabled new ransomware groups and lone-wolf operators to emerge rapidly, notably groups like Global Secret Group and Storm, along with the established Gentlemen, Qilin, and Akira. Some independent operators focus more on data extortion rather than encryption, potentially indicating a shift in tactics. Although these newcomers may lack the sustainability and institutional knowledge of established groups, the volume of ransomware incidents continues to rise, with a possible decline in encryption-based attacks but an increase in data extortion threats.