National Cyber Security Centre expects attacks on critical facilities such as power stations, airports and hospitals

AI-powered malicious software is “highly likely” to be used in hacking attacks against the UK’s power stations, airports and hospitals by 2028, according to the state cybersecurity body.

The National Cyber Security Centre (NCSC) said AI will probably enable a ransomware attack against critical national infrastructure [CNI] between now and 2028. The UK’s definition of CNI covers a range of facilities and services across sectors including energy, transport, defence, food, health and finance.

The warning from the NCSC, part of the GCHQ spy agency, was published in the organisation’s annual review, which also warned that Russia and China will start using AI “routinely” in cyber-attacks.

“It is … highly likely that between now and 2028, AI-powered malware will have been used in a ransomware attack on UK CNI,” said NCSC.

Ransomware has become a cornerstone of the criminal hacker’s repertoire and is a signature ploy of gangs that typically operate out of former Soviet Union states.

After gaining access to a victim’s IT systems, the attackers then encrypt files with bespoke malicious software – or malware – and then demand a payment in cryptocurrency to unlock the crippled systems and return any stolen data. UK ransomware victims include Royal Mail, outsourcing firm Capita and various public bodies, including councils.

AI is set to enhance the ransomware threat by helping attackers with tasks such as scouting targets, locating weaknesses in IT networks and writing malicious code, said the NCSC.

Source link