Connect with us

General News

Firm Explores the Evolution of AI-powered Ransomware with Password-gated Capabilities

Published

on

Kindly share this post

Kaspersky experts have revealed the inner workings of FunkSec — a ransomware group that illustrates the future of mass cybercrime: AI-powered, multifunctional, highly adaptive and operating on volume with ransoms as low as $10,000 to maximise profits.

Kaspersky’s Global Research and Analysis Team (GReAT) constantly monitors the ransomware threat landscape, where attacks continue to rise. According to the company’s latest State of Ransomware report, the share of users affected by ransomware attacks worldwide increased to 0.44% from 2023 to 2024, up by 0.02 percentage points.

While this percentage may appear modest compared to other cyber threats, it reflects the fact that attackers typically prioritise high-value targets rather than mass distribution, making each incident potentially devastating. Within this evolving landscape, FunkSec has emerged as a particularly concerning threat.

Active for less than a year since its emergence in late 2024, FunkSec has quickly surpassed many established actors by targeting government, technology, finance and education sectors. What sets FunkSec apart is its sophisticated technical architecture and AI-assisted development.

The group packages full-scale encryption and aggressive data exfiltration into a single Rust-based executable, capable of disabling over 50 processes on victim machines and equipped with self-cleanup features to evade defenses.

Beyond its core ransomware functionality, FunkSec has expanded its toolkit to include a password generator and a basic DDoS tool — both showing clear signs of code synthesis using large language models (LLMs).

FunkSec’s approach reflects the evolving landscape of mass cybercrime, combining advanced tools and tactics. Kaspersky’s GReAT experts highlight the key features that define their operations:

Password-Controlled functionality

GReAT experts discovered that FunkSec ransomware features a unique password-based mechanism that controls its operation modes. Without a password, the malware performs basic file encryption, while providing a password activates a more aggressive data exfiltration process in addition to encryption to steal sensitive data.

FunkSec packs full-scale encryption, local exfiltration and self-cleanup into a single Rust binary—without a side-loader or a companion script. That level of consolidation is uncommon and gives affiliates a plug-and-play tool they can deploy almost anywhere.

Use of AI in development

Code analysis shows that FunkSec is actively using generative artificial intelligence to create its tools. Many parts of the code seem to be automatically generated rather than manually written. Signs of this generic placeholder comments (such as “placeholder for actual check”) and technical inconsistencies, like commands for different operating systems that don’t align properly. Additionally, the presence of declared but unused functions—such as modules included upfront but never utilised — reflects how large language models combine multiple code snippets without pruning redundant elements.

“More and more, we see cybercriminals leveraging AI to develop malicious tools. Generative AI lowers barriers and accelerates malware creation, enabling cybercriminals to adapt their tactics faster.

By reducing the entry threshold, AI allows even less experienced attackers to quickly develop sophisticated malware at scale,” comments Marc Rivero, Lead Security Researcher at Kaspersky’s GReAT.

High-volume, low-ransom strategy

FunkSec demands unusually low ransom payments, sometimes as little as $10,000, and pairs this with the sale of stolen data at discounted prices to third parties. This strategy appears designed to enable a high volume of attacks, helping the group quickly establish its reputation within the cybercriminal underground. Unlike traditional ransomware groups that seek million-dollar ransoms, FunkSec employs a high-frequency, low-cost model — further underscoring its use of AI to streamline and scale operations.

Expands beyond ransomware

FunkSec has expanded its capabilities beyond the ransomware binary. Its dark leak site (DLS) hosts additional tools, including a Python-based password generator designed to support brute-force and password-spraying attacks, as well as a basic DDoS tool.

Advanced evasion

FunkSec employs advanced evasion techniques to avoid detection and complicate forensic analysis. The ransomware is capable of stopping over 50 processes and services to ensure thorough encryption of targeted files. Additionally, it includes a fallback mechanism to execute certain commands even if the user launching FunkSec lacks sufficient privileges.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

General News

NRS Extends Saturday Tax Office Operations Nationwide Ahead of Rev360 Rollout

Published

on

Kindly share this post

The Nigeria Revenue Service (NRS) has announced the extension of weekend tax office operations across the country as part of preparations for the rollout of the Rev360 Phase I Tax Administration System.

In a public notice issued in Abuja on May 7, the Service stated that all Emerging, Medium, Large, and Government Business Offices nationwide will now open on Saturdays from May 8 to June 27, 2026.

According to the notice, the offices will operate between 10:00 a.m. and 3:00 p.m.

The NRS explained that the initiative is aimed at providing additional taxpayer support and improving service delivery during the implementation of the new tax administration platform for Medium and Emerging Taxpayer segments.

The Service noted that the extended Saturday operations are designed to assist taxpayers requiring guidance with the new system, facilitate seamless compliance during the June peak Companies Income Tax filing period, and improve access to tax services outside regular weekday hours.

It encouraged taxpayers to take advantage of the initiative to resolve tax-related matters, seek necessary guidance, and ensure timely compliance with their tax obligations.

“The NRS remains dedicated to delivering efficient, transparent, and taxpayer-focused services,” the statement read.

The notice was signed by Zacch Adedeji, PhD, Executive Chairman of the Nigeria Revenue Service. “You say Transformation, We say Rev360.”


Kindly share this post
Continue Reading

General News

NCS, Gowon University Partner on Research, Development

Published

on

Kindly share this post

The Nigeria Customs Service (NCS) and the Yakubu Gowon University have moved to formalise a strategic alliance aimed at advancing national security research, border management studies, and student welfare.

Comptroller General of Customs, Adewale Adeniyi, made this known during a visit by the University’s Vice Chancellor Professor Hakeem Fawehinmi, to the headquarters of the agency yesterday in Abuja.

Adeniyi noted that the collaboration marks a significant step in bridging the gap between paramilitary operations and academic research. “I have a long institutional history with this university,” CGC Adeniyi remarked.

He noting that previous attempts to sign a formal Memorandum of Understanding (MoU) were interrupted by leadership transitions and that the Service is now committed to a phased implementation of support, focusing on projects with the highest impact on the learning environment.

Adeniyi said “For us, beyond legacy, what matters most is impact. We understand the realities facing Nigerian universities, from transportation challenges to infrastructure gaps.

“Our interest is to support initiatives that will create a conducive learning environment and positively impact students.”

He also stressed the importance of the university in relation to its status of the nation’s capital u University. He pledged to support the institution in meeting the demands of its 40,000-strong student population.

Responding, Professor Fawehinmi highlighted the university’s Centre for Defence and Migration Studies as a critical hub for the partnership.

He suggested that the centre could provide the NCS with specialised research into national security and executive training for officers.

“Support in areas such as mass transit buses, ICT infrastructure, research facilities, and professional collaboration will significantly strengthen our capacity,” the Vice Chancellor noted, adding that as the only conventional public university in the Federal Capital Territory, the institution carries enormous responsibilities.


Kindly share this post
Continue Reading

General News

CRMI Warns of Risks, Sees Gains in UAE Exit from OPEC

Published

on

Kindly share this post

Chartered Risk Management Institute of Nigeria (CRMI) has highlighted potential benefits for Nigeria such as increased production flexibility, expanded market share, and improved revenue prospects following the United Arab Emirates’ decision to exit the Organisation of the Petroleum Exporting Countries (OPEC).

CRMI Warns of Risks, Sees Gains in UAE Exit from OPEC

However, the Institute cautioned that these opportunities come with significant risks, including exposure to price volatility, reduced protection from coordinated supply management, intensified competition, and mounting fiscal pressures.

In a statement signed by Victor Olannye, registrar/chief executive officer, described the development as a major shift in global oil governance, with far-reaching implications for market stability and international energy dynamics.

Olannye noted that the move could trigger increased oil price volatility, heightened geopolitical tensions, and disruptions across global energy supply chains.

He urged corporate organisations, public institutions, financial bodies, and risk professionals to reassess their risk frameworks and strengthen resilience in response to evolving global realities.

He identified key risks to include a potential weakening of OPEC cohesion, oil price instability, geopolitical uncertainty, supply chain disruptions, macroeconomic volatility, and the possibility of further exits by member states.

In line with its mandate to promote sound risk management and support national development, the Institute advised corporate organisations to implement robust risk management frameworks, adopt dynamic hedging strategies, and diversify their business portfolios.

Financial institutions and investors were also urged to reassess energy-related risks, strengthen portfolio diversification, and enhance risk disclosure practices.

CRMI further called on government and policymakers to reinforce fiscal buffers, accelerate economic diversification, and promote the transition to renewable energy.

Individual risk professionals were encouraged to upskill in geopolitical risk analysis and energy economics while developing expertise in scenario planning and predictive analytics.

The Institute emphasised the need for stakeholders to reposition proactively to navigate the evolving geo-economic landscape. It also projected possible scenarios, including fragmentation of global oil governance structures, increased reliance on market-driven pricing mechanisms, and an acceleration of global energy transition efforts.

 


Kindly share this post
Continue Reading

Trending