AI helped build a browser-based ransomware for Chromium on Windows and Android

Colleagues, I’d like to draw attention to a cybersecurity story.

Researchers have found an AI-generated sample that turned a legitimate Chromium feature into a working ransomware chain.

The attack uses a phishing lure to persuade a user to grant a site access to the file system. From there, the script can read, exfiltrate, encrypt and overwrite files directly in the browser.

What makes it notable is that no native payload, root access or vulnerability exploitation is required.

Why this matters: cases like this show that a single browser permission request can become a security decision, not a mere formality.

Do you review how such permissions are assessed in your company?

#cybersecurity #ransomware #Chromium #AI