AI-based ransomware claimed more than 80 victims in 1 month, some in Brazil

Check Point researchers discovered something The new ransomware, developed with the use of artificial intelligence, claimed more than 80 victims in just one month; some of these were in Brazil.According to those responsible for the attacks. According to the report published on Friday, this is FunkSec (10).

The group behind the malware, which emerged in late 2024, is investing in double extortion techniques, mixing data theft with encryption as a way to force targets to pay the ransom. Interestingly, the amounts required are low, usually not exceeding $10,000; This is around R$ 61,000 at the current price.

According to the cybersecurity company, artificial intelligence was likely used to speed up the development of the malicious file and optimize some of its capabilities; This shows that there is a “lack of technical knowledge”. In this way Presumed to be a group of inexperienced cybercriminals seeking fame.

In addition to ransomware, FunkSec appears to be involved in other attack methods. The group sells tools for denial of service attacks (DDoS), remote desktop management and password generation on its website.

Victims in many countries

According to the report, the Algeria-based FunkSec ransomware group claims to attack targets mainly in the United States and India; these targets represent 21% and 18% of the targets. Among the main victims of malicious acts, Italy and Brazil come in second with a share of 5% each, and Israel comes in second with a share of 4%..

Companies listed as possible targets include a company that works with travel reservations, a company in the white goods industry, and a company that provides energy management services. However, none confirmed the reported cyberattacks.

Some of the organization’s members claim to be involved in hacktivist activities primarily aligned with the “Free Palestine” movement. Doubts have been raised about the authenticity of the latest actions, as much of the leaked data was part of previous hacktivism campaigns, as claimed by researchers.