AI is more likely to improve the efficiency of ransomware operations than to create fully autonomous cybercrime, because profit and business models drive criminal behavior more than technology. The clearest near-term risk is AI helping groups like BlackBasta, FulcrumSec, Cl0p, and LockBit better exploit and monetize stolen data through extortion, negotiation, and secondary markets such as Leak Bazaar. #BlackBasta #FulcrumSec #Cl0p #LockBit #LeakBazaar
Keypoints
- Cybercriminals usually follow profitable business models, not new technology.
- Ransomware innovation has mostly come from strategy, organization, and monetization.
- AI is currently being used to optimize tasks like phishing, debugging, and data review.
- Agentic AI ransomware remains limited and still depends on human operators.
- AI may matter most in extorting victims and monetizing stolen data after attacks.