What are the threats that individuals and businesses face from ransomware in the age of AI?

In this compelling interview with Wise TV, Murat Lostar, General Manager of Lostar, discusses the structures behind ransomware, the evolution of extortion, and how artificial intelligence is making these threats increasingly sophisticated.

Ransomware is, in fact, a subset of a broader category of attacks—essentially, extortion. By extortion, we mean cornering an organization and demanding money or other concessions in exchange for a way out of that predicament. This form of extortion operates through distinct, specialized roles. In attacks on large organizations, we aren’t just dealing with individual hackers; rather, there are organized criminal syndicates at work. One group develops the specialized software, another handles its deployment, others identify and bribe insiders within the target company to obtain sensitive information, and a final group manages the extortion itself—issuing the ransom demand and collecting the payment. You can think of this as being structured much like a call center. These are the highly organized, “corporate-style” operations. When we look at the landscape for SMEs (small and medium-sized enterprises) and individuals, we encounter what is commonly known as ransomware. Ransomware is a type of malicious software—or, to use a more general term familiar to the public, a “virus.” What ransomware does is infiltrate a system, encrypt the files on a computer, and then demand payment in exchange for the means to decrypt and recover them. Meanwhile, they are evolving their tactics—not only by stealing information and using it against us, but also by employing new methods, such as threatening to leak that data online unless a ransom is paid. Previously, attackers typically developed a piece of ransomware, spread it like a virus, and then waited for a “harvest”—that is, for the ransoms to be collected. However, with the integration of artificial intelligence into our lives, we are seeing a convergence in the realm of large-scale extortion. Why do hacker gangs target major corporations rather than individuals? Because targeting a large company allows them to demand millions of dollars—a sum that could never be extracted from an individual. Yet, by leveraging AI to handle a significant portion of the work that would otherwise require an entire gang of attackers, these cybercriminals can shift their focus toward individuals. We will likely see more personalized attacks—tailored to a person’s identity, character, gender, and interests—accompanied by corresponding ransom demands. Unfortunately, this will only serve to increase their success rate. As for solutions, standard security measures remain effective in this context, just as they are in many other areas. In other words, by addressing the issue from both ends—ensuring the technological security of our systems, and—as employees or users—taking the right actions (such as remaining vigilant, questioning suspicious prompts before clicking or accepting, and exercising greater caution)—we can build a robust framework. By integrating these three pillars—technology, processes, and people—we can implement comprehensive safeguards that will help us defend against threats like ransomware and extortion.

The Dangerous World of Ransomware

Ransomware has become an increasingly significant threat in today’s digital world. This type of software infiltrates users’ computers, encrypts their files, and subsequently demands a ransom to restore access to them. As part of a broader category of cyberattacks, ransomware corners its victims, extorting money or making other demands. Such attacks can target both large organizations and individuals; however, large institutions often attract more attention, as attackers can demand substantially higher ransoms from them. With the advancement of artificial intelligence, ransomware is becoming increasingly sophisticated, allowing attackers to carry out personalized attacks that improve their success rates.

How Ransomware Works

Ransomware typically infiltrates a user’s computer and encrypts their files, rendering them inaccessible. To regain access to these files, the victim is required to pay a ransom. This payment is usually requested in the form of cryptocurrency, as such transactions are untraceable and remain anonymous.

Corporate Targets and Large-Scale Extortion

Large organizations are among the primary targets for ransomware. By attacking such institutions, perpetrators can demand ransoms reaching millions of dollars. These attacks are generally orchestrated by organized crime syndicates that develop specialized software to target their victims. Corporate-level attacks are typically more complex and highly planned. Individual Targets and Personalized Attacks

Ransomware can also target individuals. However, it is generally not feasible to demand large ransom sums from private individuals. With the advancement of artificial intelligence, attackers can orchestrate more personalized attacks against individuals. Such attacks are tailored to the victim’s identity, personality, gender, and interests, which increases the likelihood of success.

The Future of Artificial Intelligence and Ransomware

Artificial intelligence enables ransomware to become increasingly sophisticated. By leveraging AI, attackers can execute more effective and targeted strikes. This suggests that ransomware could pose an even greater threat in the future. While AI simplifies the work of attackers, it also necessitates the evolution of defensive mechanisms.

Measures Against Ransomware

Standard security solutions can be effective in protecting against ransomware. It is crucial to ensure the technical security of systems, encourage users to take appropriate actions, and remain vigilant in suspicious situations. Furthermore, at an organizational level, implementing measures that encompass technology, processes, and people can provide a robust defense against ransomware.

Conclusion

Ransomware poses a serious threat to both large organizations and individuals. These malicious programs encrypt files and demand a ransom from victims; with the development of artificial intelligence, they are becoming increasingly complex. Nevertheless, standard security measures and cautious user behavior can serve as an effective defense against such attacks. By bringing together technology, processes, and human factors, stronger protection against ransomware can be achieved.