First AI‑operated ransomware attack still relied on human operators

A recent ransomware incident was marketed as the first to be run by artificial intelligence. Researchers examined the malware’s code and operational patterns. Their analysis showed that the AI components performed limited tasks such as file selection. Critical steps like encryption key generation and ransom negotiation were handled by a human attacker. The hybrid approach demonstrates that fully autonomous ransomware remains unrealized. Security experts warn that AI can still augment malicious campaigns even without full automation. The finding highlights the need for updated detection tools that consider both AI‑assisted and manual techniques. Organizations are advised to strengthen backups and incident response plans.