AI-built ransomware kits are behind a 70% surge in attacks

Attackers are increasingly deploying AI tools to carry out ransomware attacks at scale

As AI tools become more available, scammers are deploying ransomware at scale. According to an Outreachx report, automation and AI have contributed to a significant increase in attacks as fraudsters deploy the “Ransomware-as-a-Service” kit.

The use of these tools is consistent with a significant increase in ransomware cases. Acronis reports that the number of verifiable ransomware victims rose 70% in the first half of 2025. This increase may be partly because scammers can deploy attacks on a larger scale.

Furthermore, these attacks are increasingly leveraging human error by using AI. Attackers use LLMs such as ChatGpt to write phishing emails, fear tor notes, and other content designed to put pressure on the victim. They then sell these as kits that can be used in other attacks.

“We’re seeing ransomware move from code to content. It’s not just malware, it’s a story, campaign, pressure script, and it’s sold as plug and play,” says Anirudh Agarwal, CEO of Autreachx.

You might like it too: Cryptocriminal transactions exceeded $400 billion in 2024: Chain Analysis

Ransomware attacks increase

Crypto continues to play a central role in ransomware attacks and remains a priority payment method for attackers. However, despite the increase in the number of casualties, the total ransom payments fell 35% in 2024, according to a report from the chain analysis.

Improved investigative practices, asset attacks, and chain sanctions have helped reduce ransom profits, particularly in the second half of 2024. Furthermore, restrictions on many Russian-based crypto platforms have significantly reduced the ability of attackers to wash their funds.

read more: Bitcoin ransomware scams over 250 companies for $42 million