Research shows that generative AI is helping cybercriminals develop customized malware, create convincing phishing messages, and accelerate ransomware attacks.

 

What happened

Researchers found that cybercriminals are using generative artificial intelligence (AI) to develop custom malware, create more convincing phishing messages, and accelerate ransomware attacks. The findings, reported by Cyber Security News, indicate how AI is changing the way attackers develop malicious tools and move through compromised networks. By generating and modifying code more quickly, hackers can create unfamiliar malware that may be harder for security tools relying on known malicious file signatures to recognize.

AI is also helping attackers write phishing emails and build deceptive websites with fewer spelling and grammatical errors. Once inside a network, they can use AI to identify valuable information more quickly, potentially accelerating data theft and encryption.

 

Going deeper

Traditional antivirus and endpoint security tools often use signatures to identify known malicious files. Although this approach remains useful, attackers can make small changes to their code to produce new variants that do not match previously recorded signatures.

The research describes how generative AI can speed up this process, allowing attackers to create and modify scripts without relying exclusively on established malware tools. This also means that developing customized malware may become more accessible to smaller criminal groups that lack extensive software development resources. However, AI-generated malware does not automatically evade detection. Security products can still identify suspicious behavior, even when a file has never been encountered before.

AI is also being used to improve social engineering. Attackers can generate convincing messages in different languages, making fraudulent communications appear more credible to employees. Some phishing campaigns encourage victims to install remote monitoring and management software, which can provide attackers with control over compromised devices. After gaining access to a network, attackers can use AI to search and classify large volumes of information to identify sensitive files or other valuable data. This can reduce the time between the initial compromise and the theft or encryption of information.

These developments make it important for organizations to monitor suspicious activity across their networks rather than relying solely on known malware signatures. The researchers identified AI-assisted detection, the integration of security data, and faster incident investigation as approaches that can help defenders respond to evolving threats.

 

In the know

Generative artificial intelligence (AI) is a type of AI that can create new content, including text, images, audio, and computer code, based on patterns learned from existing data. In cybersecurity, generative AI can help security teams analyze threats and identify vulnerabilities, but cybercriminals can also misuse it to develop malicious code, create convincing phishing emails, and automate parts of their attacks. By reducing the time and technical expertise needed to produce and modify malicious content, generative AI can make certain cyberattacks easier to carry out and adapt.

Read also: Is generative AI capable of ethical decision-making?

 

Why it matters

Generative AI is making it easier for attackers to create convincing phishing emails, modify malware, and accelerate data theft. For healthcare organizations, these threats put sensitive patient information and critical systems at risk. Furthermore, ransomware attacks can disrupt access to patient records, laboratory services, and other essential operations.

See also: HIPAA Compliant Email: The Definitive Guide (2026 Update)

 

FAQS

Are healthcare organizations at risk from AI-powered cyberattacks?

Yes. Healthcare organizations may be targeted through phishing, malware, and ransomware attacks that threaten patient information, electronic health records, and essential clinical services.

 

Does generative AI make cyberattacks fully automated?

No. Although generative AI can automate or accelerate certain tasks, many attacks still require human decisions, access to target systems, or additional tools to execute successfully.

 

Can traditional cybersecurity tools still detect AI-generated malware?

Traditional tools remain useful, particularly when combined with behavioral analysis, endpoint detection and response, and network monitoring. These approaches can identify suspicious activity even when malware is new or modified.