New amateurish ransomware group FunkSec using AI to develop malware

Summary: Researchers have identified a new ransomware group named FunkSec, which has rapidly claimed over 80 victims in December, utilizing recycled datasets and demanding low ransoms. The group appears to blend elements of hacktivism and cybercrime, leveraging AI to enhance their operations despite a lack of technical expertise.

Threat Actor: FunkSec | FunkSec
Victim: Various companies | Various companies

Key Point :

• FunkSec has claimed over 80 victims in just one month, more than any other group in December.
• The group demands low ransoms, sometimes as little as $10,000, and sells stolen data at reduced prices.
• FunkSec’s ransomware, FunkSec V1, shows signs of AI involvement in its development.
• The group engages in both ransomware attacks and hacktivist activities, claiming alignment with the “Free Palestine” movement.
• Many of FunkSec’s members have a background in hacktivism and aim to boost their credibility by associating with well-known entities.