AI-Assisted Ransomware Campaign by FunkSec Allegedly Targets Over 80 Victims

The FunkSec ransomware group allegedly leveraged AI tools, such as Miniapps chatbots, to develop and refine its ransomware operations, which is reported to have allowed apparently inexperienced actors to produce advanced malware rapidly. It is reported that the group claimed to have launched its data leak site in December 2024, allegedly targeting over 80 victims with ransomware and double extortion tactics. AI reportedly supported the creation of detailed code comments in order to refine the group's technical presentation, while also allegedly facilitating the rapid iteration of its custom encryptor written in Rust.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.2 Cyberattacks, weapon development or use, and mass harm

The incident involves the use of AI systems to assist in coding and developing cheaper, more rapidly iterating ransomware and custom malware tools.

Additional risk subdomains

• 4.3 Fraud, scams, and targeted manipulation: The group uses AI-assisted ransomware for double extortion, blackmailing victims, and selling stolen data for financial gain.
• 3.1 False or misleading information: The group generated and published a fake, AI-generated audio recording of a call between political figures to boost their credibility.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The security risk was caused by human threat actors who intentionally used deployed AI models and platforms to develop malware and support cyberattacks.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The incident involves the deployment of an AI chatbot and the generation of deepfake audio content, both of which fall under transparency obligations for limited risk systems under the EU AI Act.

AI system and alleged parties

• AI system: Miniapps chatbots, unspecified AI
• AI purpose: Code Generation; Chatbot
• Behaviour type: Assistant
• Alleged developer: FunkSec
• Alleged deployer: XTN, Scorpion, FunkSec, El_Farado, DesertStorm, Blako, Bjorka
• Alleged harmed parties: FunkSec ransomware targets

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Minor, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Minor, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Minor, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: The reports describe over 85 victims facing ransom demands as low as $10,000, with stolen data resold for $1,000 to $5,000.

Directly caused: The average financial loss per occurrence is difficult to verify as victims have not publicly confirmed paying, but potential direct extortion demands average $10,000 per victim.

Inferred additional harm: It is likely that victims incurred significant indirect financial losses from system downtime, incident response, and cybersecurity remediation, potentially totaling hundreds of thousands of dollars across the 85 victims.

Malicious content

Reported: The reports explicitly describe the creation of malicious tools and code using AI.

Directly caused: The threat actors used AI to write Rust-based ransomware code, generate clean English code comments, and build a malicious chatbot on the Miniapps platform.

Privacy

Reported: The reports explicitly describe data theft and double extortion tactics involving victim data.

Directly caused: The group exfiltrated and threatened to leak or sell sensitive victim data, though some of the leaked datasets were found to be recycled from older campaigns.

Inferred additional harm: It is likely that non-public sensitive information of employees or customers of the 85 victim organizations was compromised during the successful network intrusions.

Epistemic

Reported: The reports explicitly describe the creation of a fake, AI-generated audio recording of political figures.

Directly caused: The group published a YouTube video containing an AI-generated fake call between a U.S. presidential candidate and the Israeli Prime Minister.

People affected

• Occurrences reported: 1
• People reportedly harmed: 85
• People reportedly exposed: 85

Potential causes

Technology

• AI-Assisted Malware Generation: LLMs enabled rapid writing and refinement of Rust-based ransomware.
• Unrestricted AI Platforms: Miniapps allowed creation of malicious chatbot without standard safety guards.
• AI Audio Generation Tools: Used to create fake audio leaks of politicians to boost group credibility.

Data Inputs

• Malicious Source Code Inputs: Developer fed ransomware source code into LLMs to automate improvements.

Human Factors

• Low Technical Skill of Actors: Inexperienced developers used AI to bypass their lack of programming skills.
• Language Barrier Compensation: LLMs generated perfect English comments, masking the author's basic skills.

Process and Methods

• AI-Driven Rapid Code Iteration: Using AI agents to quickly generate and test new ransomware versions.
• Malicious Chatbot Support: Deploying a custom AI bot to automate and support cybercrime operations.

Information quality

• Classification confidence: High
• Reason for confidence: The reports from Check Point Research provide highly detailed cybersecurity analyses of the group's operations, tools, and AI usage. The technical details regarding the Rust binary and the Miniapps chatbot are clear, though some victim details remain unconfirmed by the victims themselves.
• Ambiguities identified: The exact extent of original data stolen versus recycled data is unclear, and the victims have not publicly confirmed the attacks.
• Alternative interpretations: The AI's role could be viewed purely as a general-purpose coding tool rather than a specialized malicious AI, but the release of a custom malicious chatbot supports the AI-assisted threat classification.

The FunkSec ransomware group utilized AI tools to lower the technical barrier for malware development, enabling inexperienced actors to conduct rapid double-extortion campaigns against over 80 global victims. While the national security impact remains minor, it demonstrates how AI-assisted coding accelerates the proliferation of cyber threats.

• Overall national security impact: Minor
• Scope: Multiple nations
• Primary target: No clear primary
• Other affected: US, India, Italy, Brazil, Israel, Spain, Mongolia
• Alleged perpetrator: FunkSec

Threat characteristics

• Imminence: Near-term. The group represents an active, developing cyber threat requiring ongoing monitoring by cybersecurity and security agencies.
• Autonomy: Human-controlled. AI tools were used strictly as assistants to write code and generate media, with all operational decisions executed by human actors.
• Novelty: Evolved capability. Demonstrates a significant evolution where AI-assisted development lowers the technical barrier for novice threat actors to deploy custom malware.

Impact by dimension

• Physical security: Minor. An energy management service was among the targeted entities, but no operational disruption or kinetic impact on critical infrastructure was reported.
• Information security: Minor. The group generated a fake AI audio call of political figures to gain notoriety, representing a minor information operations capability with limited strategic impact.
• Sovereignty: Negligible. No significant impact on state authority, electoral systems, or core government decision-making processes was observed.
• Economic security: Minor. Financial extortion targeted over 85 private organizations globally, but individual ransom demands were low and no strategic technology theft occurred.
• Societal stability: Minor. The incident involved data theft and potential privacy compromise for employees or customers of victim organizations, but did not cause large-scale societal instability.