Description
PromptLock is the first known AI-powered ransomware, documented by ESET Research. It generates Lua scripts from hard-coded prompts to enumerate the local file system, inspect target files, exfiltrate selected data, and encrypt files with the SPECK 128-bit algorithm, and the scripts run cross-platform on Windows, Linux, and macOS.
Stats
- First seen
- September 2025
- Last seen
- October 2026
Also known as
Promptlock
Alert name variants
| Alert Name |
|---|
| Generic.Ransom.PromptLock.A.48837827 |
| Linux.Ransomware.PromptLock |
| Linux.Trojan.PromptLock |
| Trojan.Linux.Ransom.PromptLock.B |
| Trojan.Linux.Ransom.PromptLock.C |
| Trojan.Linux.Ransom.PromptLock.D |
| Trojan.Ransom.PromptLock.A |
| Trojan.Ransom.PromptLock.B |
| Trojan.Ransom.PromptLock.C |
| Trojan.Ransom.PromptLock.D |