UK: AI Ransomware Attack on Infrastructure Likely by 2028

The UK's National Cyber Security Centre (NCSC) has warned that by 2028, it is highly likely that AI-based malware will be used in ransomware attacks on the country's critical national infrastructure. The assessment was published in the Annual Review 2026. According to the NCSC, AI will enhance the scale and effectiveness of ransomware operations, social engineering, and vulnerability exploitation.

The warning is part of a broader assessment linking cyber threats to the UK's economic and national security. The NCSC also stated that China, Russia, and other states will use AI-based cyber capabilities to achieve geopolitical goals, increasing the scale and speed of threats. In addition to ransomware, the center highlighted the growing threat of state-backed cyber espionage targeting politicians, government officials, and other high-risk individuals. Throughout the year, the NCSC observed persistent targeted phishing attacks on such individuals and an increase in attempts to compromise messaging applications.

In March, Dutch intelligence agencies warned that Russian state hackers are attacking officials, military personnel, and civil servants worldwide by posing as supporters of Signal, to seize accounts. The NCSC emphasized that technology has always impacted cybersecurity, but what is different today is the pace, and states' ability to leverage new technologies will increasingly determine their effectiveness.