TrendAI researcher says AI will reshape ransomware by 2027
Original title: AI Set to Revolutionize Ransomware Following “Stagnant” Few Years
Bob McArdle told IRISSCON that AI tools such as Artex could speed intrusion and devalue initial-access brokers.
TrendAI cybercrime research director Bob McArdle told the IRISSCON 2026 audience in Dublin on November 11 that ransomware has been stagnant but could change sharply in 2027 as AI lowers barriers to intrusion. He said groups so far use AI mainly to find valuable data and to run early extortion chats, while the path from initial-access brokers to double extortion is unchanged. He expects frameworks such as Artex to automate vulnerability discovery, shrink the kill chain, and push brokers toward privilege escalation. He also predicted data-sale models alongside extortion, more groups, and large gangs absorbing smaller ones.
Unconfirmed: The 2027 changes are McArdle’s forecast, not confirmed incidents or measured activity.
- McArdle spoke at IRISSCON 2026 in Dublin on November 11.
- He said AI frameworks like Artex can find and exploit internet-facing flaws quickly.
- Centralized data stores could be targeted by threats to tamper with AI orchestration.
- He expects Conti- and LockBit-scale groups to acquire smaller crews or affiliate networks.
From the original article
2 min read at infosecurity-magazine.com
TrendAI’s Bob McArdle said ransomware techniques will change significantly in the next year, with AI making attacks more dangerous and profitable
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.