The BaseNewsWIRED
Beware the New AI-Fueled Ransomware Boom
In its Kernel Panic newsletter, WIRED reports that claimed ransomware attacks have risen in recent months and that researchers it spoke to link part of the rise to AI helping inexperienced actors start their own groups. Fully AI-run attacks have not appeared yet.
Why it matters
The same thing, for different readers.
What it means for you
Phishing and scam messages that look convincing in any language are getting easier to produce with AI, which raises the chance of ordinary people and firms being targeted.
For lawmakers
WIRED's sources say AI lets lone operators run their own ransomware groups, which complicates law enforcement efforts aimed at a few big criminal services.
For researchers
Researchers quoted say attackers use AI mainly for phishing and negotiation, not full automation, and that attack counts are unreliable because victims and attackers misreport.
In their own words
Every quotation was found, word for word, in the text we saved from the source. That shows the words are there; it does not make them true, or prove the speaker meant them as quoted.
From the source’s own text.
“Internationally we’re seeing a lot more attacks. That to me is the really new part, and I do think it is in part fueled by AI.”
“We are seeing AI relied on more heavily in certain aspects of the ransomware attack chain, such as creating better phishing emails and in the negotiation process, but the ‘successful’ ransomware groups are still largely human operated”
“That growth has all happened because, in my eyes, this acceleration that AI has provided to these threat actors, essentially allowing for them to go out and start their own groups”
How the finding was reached
In our words, from the source. Weigh the finding by how it was made.
- What was done
- A newsletter summarising researchers' tracking of ransomware leak sites and vendor analyses (Halcyon, ReliaQuest, Recorded Future), with interviews.
- What it found
- Some trackers count nearly 3,000 alleged ransomware attacks on leak sites over the summer, a 20 to 40 percent rise since spring by some estimates; Halcyon counts around 111 groups claiming attacks between July and September.
- What it does not show
- WIRED says exact numbers are hard to establish because victims do not always disclose and attackers inflate claims; the link to AI is the researchers' judgment, not measured.
- Status
- A report
The record
- Questions
- How is AI used in attacks, defence and war? · Can AI systems act beyond what people intended or allowed?
- People
- Matt Burgess (Wrote it, senior writer, WIRED) · Lily Hay Newman (Wrote it, senior writer, WIRED) · Cynthia Kaiser (Speaks, former FBI cyber deputy director, leads research at Halcyon) · Allan Liska (Speaks, ransomware researcher and threat intelligence analyst, Recorded Future) · Brandon Tirado (Speaks, director of threat research, ReliaQuest)
- What we read
- We read the whole source.
- Found by
- The Radar, run of November 15, 2026, via
wired-ai(tier 2: a major outlet’s own reporting) - Cite this
- WIRED, “Beware the New AI-Fueled Ransomware Boom”, November 14, 2026. Entry in the Ctrl AI Base, https://ctrlai.com/base/wired-2026-11-14-ai-fueled-ransomware-boom