From Floppy Discs to Claude Mythos, How Ransomware Grew Into a Multibillion-Dollar Industry

Why It Matters

Ransomware threatens corporate profitability, critical infrastructure, and public safety, forcing costly security upgrades and regulatory changes. Its rapid AI‑driven evolution means traditional defenses may quickly become obsolete.

Key Takeaways

• Ransomware revenues exceed $10 billion annually, with 25% of breaches paid
• AI tools like Claude Mythos automate malware creation, lowering entry barriers
• Third‑gen ransomware adds data‑leak extortion, exploiting GDPR fines
• COVID‑19 remote work expanded attack surface, accelerating ransomware growth
• Law‑enforcement takedowns cripple gangs but AI‑as‑service persists

Pulse Analysis

The ransomware ecosystem has matured through four distinct generations, each leveraging emerging technologies to increase profitability. Early "commodity" strains such as CryptoLocker relied on mass‑distribution and modest payments, but the shift to targeted attacks in 2018 introduced bespoke ransom negotiations and higher payouts. The introduction of GDPR and other privacy laws created a lucrative double‑extortion model, where criminals not only encrypt data but also threaten public exposure, forcing victims to pay to protect reputational damage.

Artificial intelligence now reshapes the threat landscape. Anthropic’s Claude Mythos demonstrated that large‑language models can generate sophisticated phishing content and malware code in multiple languages with minimal human oversight. This AI‑enabled ransomware‑as‑a‑service democratizes cybercrime, allowing low‑skill actors to lease weaponised tools on dark‑web marketplaces. Consequently, the average cost of a breach has risen, while the proportion of successful attacks remains stubbornly high despite improved multi‑factor authentication and patch management.

Policy responses lag behind technological advances. While the UK and other governments have sanctioned Russian‑linked gangs and coordinated operations like Operation Cronos, the rapid diffusion of AI tools outpaces regulatory frameworks. Companies must adopt a layered security posture that includes continuous threat hunting, zero‑trust architectures, and cyber‑insurance that accounts for data‑leak extortion. Ultimately, the industry’s resilience will depend on aligning public‑private collaboration with agile legislation that can address the evolving AI‑driven ransomware threat.