Cybersecurity firm Check Point has identified a ransomware Trojan named FunkSec, reportedly responsible for attacks on 85 corporate organisations since its emergence late last year.
Written in the Rust programming language, the Trojan demonstrates characteristics suggesting it was generated using a large AI model.
Researchers noted the presence of fluent English comments in the script and an unsophisticated attack methodology, reinforcing the likelihood of AI involvement in its creation.
The Trojan was discovered on an underground forum, where it is being offered for rent and sale by a hacker known as “el_farado.”
While the hackers behind FunkSec attempt to portray advanced capabilities, evidence suggests otherwise. Researchers found that the same hacker recently posted in forums asking how to “become a hacker,” indicating limited technical expertise.
Additionally, much of the “stolen data” attributed to FunkSec was discovered to have originated from other criminal organisations, highlighting exaggerated claims to enhance their reputation.
This case underscores the growing risks posed by AI in enabling less skilled actors to develop and distribute malware, potentially lowering barriers to entry in cybercrime.
