Kaspersky Warns of Rising AI-Driven Ransomware Threats in 2026 Report
KHADAMATY-NEW
On the occasion of International Anti-Ransomware Day 2026, Kaspersky released a new report highlighting the latest ransomware trends and cybercriminal tactics shaping the global threat landscape in 2025 and beyond
According to data from Kaspersky Security Network, Latin America recorded the highest percentage of organizations affected by ransomware attacks in 2025 at 8.13%, followed by Asia-Pacific, Africa, and the Middle East. The report also revealed the growing adoption of “encryption-less” extortion attacks, where cybercriminals focus on stealing and leaking sensitive data instead of encrypting systems
Kaspersky researchers identified a sharp rise in the use of Endpoint Detection and Response (EDR) killers—malicious tools designed to disable security systems before launching ransomware attacks. The company also warned about ransomware groups beginning to adopt post-quantum cryptography, signaling a major shift toward future-resistant encryption methods
The report highlighted the increasing role of Initial Access Brokers (IABs), who sell compromised corporate access through underground forums and messaging platforms such as Telegram. Remote Desktop Web (RDWeb) portals have also become a primary target for attackers seeking to industrialize ransomware operations
Among the most active ransomware groups in 2025, Kaspersky ranked Qilin as the leading ransomware-as-a-service operator, followed by Clop and Akira. Looking ahead to 2026, researchers identified “The Gentlemen” as an emerging threat actor rapidly expanding its operations through data-focused extortion strategies
Fabio Assolini, Lead Security Researcher at Kaspersky GReAT, stated that ransomware has evolved into a highly organized ecosystem focused on monetizing stolen data and scaling attacks with business-like efficiency. He urged organizations to strengthen cyber defenses, maintain offline backups, update software regularly, and invest in cybersecurity awareness and advanced threat detection solutions
