2026-07-01 · 2026-Q3
Check Point Demonstrates LLM-Generated Browser-Native Ransomware
Outside the model: AI capability Agent tooling was not the attack surface, so no layer applies.
- Fixable:
- No, architectural
- Vendor response:
- Unknown
- In the wild:
- No
Target
Chromium-based browsers (Chrome, Edge) on Windows, macOS, Linux, ChromeOS, and Android; proof-of-concept technique generated by prompting DeepSeek
Impact
A fake image-enhancement page uses the browser File System Access API (`showDirectoryPicker`) to read, exfiltrate, and encrypt a victim's local files with no native payload, app install, browser exploit, or root access. iOS and Safari are unaffected because the API is not exposed there
Root Cause
A large language model connected an unrealistic "browser malware" idea to a legitimate, sanctioned browser permission API, producing a practical social-engineering abuse path rather than exploiting a browser vulnerability