AI-Created Ransomware and NFC Attacks Lead the Surge in New Cyberattacks - Here's How You Can Stay Safe This Holidays

Why It Matters

AI lowers the skill barrier for sophisticated ransomware, while NFC expands the attack surface, both forcing defenders to rethink detection and response strategies.

Key Takeaways

• PromptLock uses AI to generate live ransomware scripts.
• AI reduces need for skilled malware developers.
• NFC malware like NGate now steals contacts.
• Threat telemetry rose 87% in H2.
• Basic hygiene and backups mitigate AI and NFC attacks.

Pulse Analysis

The emergence of generative AI as a weapon in cyber‑crime marks a turning point for threat actors. ESET’s latest report introduces PromptLock, the first ransomware that leverages an OpenAI model through the Ollama API to write and execute Lua scripts on demand. Unlike traditional ransomware that relies on pre‑written encryptors, PromptLock can interrogate a victim’s file system, decide whether to exfiltrate, encrypt, or destroy data, and adapt its behavior in real time. This dynamic capability shortens the development cycle, lowers the expertise barrier, and threatens to outpace conventional signature‑based defenses.

At the same time, near‑field communication (NFC) is becoming a covert delivery channel for malware. Researchers observed an 87 % surge in NFC‑related telemetry during the second half of the year, highlighted by the upgraded NGate family that now harvests contacts from compromised devices. NFC’s short‑range nature allows attackers to embed malicious code in seemingly innocuous tags, stickers or payment terminals, bypassing network firewalls and traditional perimeter controls. As smartphones and IoT gadgets increasingly rely on NFC for payments and data exchange, the attack surface expands dramatically, giving adversaries a low‑profile foothold.

Defending against AI‑driven ransomware and NFC‑based threats still hinges on disciplined cyber hygiene. Organizations should enforce timely patching of operating systems, browsers, and firmware, while deploying endpoint solutions that incorporate behavioral analytics rather than pure signature matching. Limiting administrative privileges, segmenting networks, and maintaining immutable, offline backups remain essential to survive encryption events. Equally important is continuous security awareness training that highlights the lure of AI‑enhanced productivity tools and the risks of unknown NFC tags. By combining these fundamentals with threat‑intelligence monitoring, enterprises can blunt the impact of emerging AI and NFC attack vectors.