UK warns AI ransomware attack on infrastructure ‘highly likely’ by 2028

What happened

AI-powered malware (software written to damage a system or steal from it) is highly likely to be used in a ransomware (software that locks up files and demands payment) attack targeting UK critical national infrastructure by 2028, the country’s National Cyber Security Centre has warned. The NCSC also warned China, Russia and other nation-states will use “AI cyber” to achieve their geopolitical goals, increasing the scale and speed of cyber threats facing the UK.

During the year, the NCSC observed persistent spear‑phishing (messages that impersonate someone to obtain passwords or money) activity against high‑risk individuals and increasing efforts to compromise messaging applications. In March, Dutch intelligence agencies warned that Russian state hackers were targeting officials, military personnel and civil servants worldwide.

The warning comes as UK cyber officials also flag growing threats from state-backed hackers targeting government officials and politicians. The assessment, published in the NCSC’s Annual Review 2026, says artificial intelligence will increase the scale and efficiency of ransomware operations, social engineering and vulnerability exploitation.

“It is also highly likely that between now and 2028, AI-powered malware will have been used in a ransomware attack on UK CNI,” the report states. The warning forms part of a broader assessment linking cyber threats to the UK’s economic and national security.

Beyond ransomware, the NCSC highlighted the growing threat of state-backed cyber espionage targeting politicians, government officials and other high-risk individuals. Attackers impersonated Signal support to hijack accounts. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information.