Uptime Hamster: 12d 19h 58mDeploy: 14 Jul 2026 21:26Updated: 2026-07-21
Logo del actor de amenaza promptlock

promptlock

2 incidentes 1 paises 0 sectores ransomware US Ultimo: 2026-06-29
Aliases: AI-powered ransomware, AI-Driven ransomware
Ver en IntelTracker → APTTrail →
PromptLock is the first documented AI-powered ransomware prototype, initially discovered by ESET researchers in August 2025 and later confirmed to be an academic proof-of-concept developed by researchers at the NYU Tandon School of Engineering. This malware distinguishes itself by its ability to dynamically generate its own malicious Lua scripts in real-time, leveraging a locally hosted Large Language Model (LLM) such as OpenAI's gpt-oss:20b via the Ollama API, enabling highly adaptive and polymorphic attacks. Its primary motivation is an academic demonstration to illustrate the potential dangers and novel attack methods of AI-orchestrated malware, with its design mimicking the goal of financial extortion through data encryption and exfiltration. The project is sometimes referred to as 'Ransomware 3.0' within academic contexts.

Aliases del actor

AI-powered ransomwareAI-Driven ransomware

Actores similares

lockbit3ransomware · 2016qilinransomware · 1933akiraransomware · 1524playransomware · 1268clopransomware · 1254lockbit2ransomware · 1002ransomhubransomware · 842incransomransomware · 832alphvransomware · 731dragonforceransomware · 580

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

TipoEstadoHost / enlaceTitle / ultimo titulo
DLS / leak siteunknownransomware.anggipradana.comRansomware Group: promptlock
Victimas
0
TTPs unicas
0
Info robada historica
N/D
Rescates reclamados
N/D
Pagos detectados
N/D

Paises afectados

United States (2)

Paises objetivo (SOCRadar)

United States

Sectores objetivo (SOCRadar)

Energy & Utilities ManufacturingInformation ServicesFinanceProfessional&Technical ServicesEnterprises & HoldingHealthCare & Social AssistanceOtherPublic AdministrationData Processing Services

URLs nuevas detectadas en IntelTracker

ransomware.anggipradana.com