Well, that Is Awkward - MIT Sloan Forced to Withdraw "Absolutely Ridiculous" Paper Claiming AI Played "Significant Role" In Most Ransomware Attacks

Why It Matters

Inflated claims about AI’s role in ransomware risk distorting security investment and policy priorities, while eroding confidence in academic research. The episode underscores the need for rigorous peer review and data‑driven analysis as AI becomes a focal point in cyber‑defense strategies.

Summary

MIT Sloan School of Management withdrew a working paper that claimed AI was involved in 80.83% of recorded ransomware attacks after leading security researchers denounced the figures as unfounded. Critics, including Kevin Beaumont and Marcus Hutchins, highlighted methodological flaws and factual errors such as attributing AI use to the long‑defunct Emotet botnet. The paper was removed from MIT’s site and the authors said they are revising it to focus on how AI use might be measured rather than asserting a definitive percentage. The controversy illustrates how sensational AI claims can outpace evidence in cybersecurity research.