AI-fueled ransomware in 2025 drives faster attacks and higher ransoms

Cybersecurity firms and government proposals outline a rapid shift in the ransomware threat in 2025, with attackers increasingly using generative artificial intelligence to speed and refine attacks, average ransom demands rising sharply, and public agencies moving to restrict payments. Industry surveys released this year show defenders struggling to keep pace as attackers compress the time from intrusion to extortion and focus on fewer, higher‑value operations worldwide.

CrowdStrike’s 2025 State of Ransomware survey found that AI‑enabled ransomware is the top concern for security leaders, with many respondents warning that generative AI is already being used across the attack chain. The report surveyed 1,100 IT and security decisionmakers across seven countries and found 78 percent of organizations experienced a ransomware incident in the past year. Half of those organizations said they felt very well prepared, yet fewer than 25 percent fully recovered within 24 hours, illustrating what CrowdStrike describes as a confidence gap between perceived readiness and recovery reality. CrowdStrike Field CTO Cristian Rodriguez said AI is touching every stage of attacks and accelerating...