AI-Assisted Ransomware Campaign by FunkSec Allegedly Targets Over 80 Victims
- Occurred
- Jan 10, 2025
- Published
- Jan 13, 2025
- Source
- AI Incident Database
Summary
The FunkSec ransomware group allegedly leveraged AI tools, such as Miniapps chatbots, to develop and refine its ransomware operations, which is reported to have allowed apparently inexperienced actors to produce advanced malware rapidly. It is reported that the group claimed to have launched its data leak site in December 2024, allegedly targeting over 80 victims with ransomware and double extortion tactics. AI reportedly supported the creation of detailed code comments in order to refine the group's technical presentation, while also allegedly facilitating the rapid iteration of its custom encryptor written in Rust.
Developers
- FunkSec
Deployers
- FunkSec
- Scorpion
- DesertStorm
- El_Farado
- Blako
- XTN
- Bjorka
Harmed parties
- FunkSec ransomware targets
Classification
Rationale: AI tools used to enhance ransomware operations causing significant cyber harm to 80+ victims.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8