AI-powered malicious software is highly likely to be used in ransomware attacks targeting the UK’s power stations, airports, and hospitals by 2028, according to a warning issued by the National Cyber Security Centre and reported by The Guardian.
Critical National Infrastructure Faces 2028 Ransomware Threat
The state cybersecurity body, which operates as part of the GCHQ spy agency, stated in its annual review that artificial intelligence will probably enable a ransomware attack against critical national infrastructure within the next few years. The UK defines its critical infrastructure across several vital sectors, including energy, transport, defence, food, health, and finance. Ransomware typically involves hackers gaining access to IT systems, encrypting files with bespoke malware, and demanding cryptocurrency payments to restore crippled networks and return stolen data. High-profile UK victims of this tactic have previously included Royal Mail, outsourcing firm Capita, and various public bodies such as local councils.
AI Tools Accelerate Hacker Target Scouting and Code Writing
Artificial intelligence is set to significantly enhance the ransomware threat by automating and accelerating tasks for criminal gangs, which frequently operate out of former Soviet Union states. According to the National Cyber Security Centre, AI assists attackers with scouting potential targets, locating weaknesses within complex IT networks, and writing malicious code. In an accompanying speech, National Cyber Security Centre chief executive Richard Horne warned the public that the technology is poised to unleash a wave of cyber incidents imminently, driven by AI’s ability to uncover vulnerabilities in IT systems that organizations have tolerated for far too long. Demonstrating this capability last month, AI helped discover a critical weakness in PHP, a computer language utilized by nearly 70% of the world’s websites.
Military Communications Face Sustained Hybrid Warfare Attacks
Communications networks utilized by the British military are subjected to daily attacks that are both persistent and sustained, according to upcoming remarks from Richard Horne. The National Cyber Security Centre chief identified Russia as one of the primary perpetrators behind these operations. These incidents have deliberately remained below the threshold of armed conflict as Moscow escalates hybrid warfare tactics. Highlighting system-wide vulnerabilities, Horne pointed to recent cyber-attacks on supermarket refrigerators in Europe, where hackers remotely raised fridge temperatures to more than 50 degrees Celsius, warning organizations to strengthen their cybersecurity against cheap and overlooked technology.
Frequently Asked Questions
What specific sectors are included in the UK’s critical national infrastructure?
The UK government classifies facilities and services across energy, transport, defence, food, health, and finance as critical national infrastructure.
Which intelligence agency oversees the National Cyber Security Centre?
The National Cyber Security Centre operates as a part of the GCHQ spy agency.
How do ransomware attackers typically extort their victims?
Attackers gain access to IT networks, encrypt files using bespoke malware, and then demand a ransom payment in cryptocurrency to unlock the systems and return stolen data.
Keep reading