AI-Powered Ransomware Kits Drive 70% Surge in Attacks, Crypto Remains Preferred Payout Method

Ransomware attacks have surged by 70% in the first half of 2025, fueled by the proliferation of AI-powered "ransomware-as-a-service" kits. Bad actors are leveraging large language models like ChatGPT to automate phishing emails, extortion notes, and pressure scripts, enabling attacks at unprecedented scale.

The shift from manual coding to content-driven campaigns marks a dangerous evolution in cybercrime. "We're watching ransomware MOVE from code to content. It's not just malware, it's narratives, campaigns, and pressure scripts, sold as plug-and-play," warns Anirudh Agarwal, CEO of security firm OutreachX.

Cryptocurrencies continue to facilitate these attacks, remaining the payment method of choice for cybercriminals. The automated nature of these AI-enhanced kits lowers the technical barrier to entry, potentially explaining the dramatic increase in verifiable victims.