Back Feeds.4Sysops

AI models enable browser

Feeds.4Sysops •IT News • July 2, 2026

Check Point Research has identified a novel attack method where AI models like DeepSeek generate functional ransomware that operates entirely within a web browser. The technique leverages the legitimate File System Access API found in Chromium-based browsers to bypass traditional endpoint security that monitors for native binary execution. By connecting theoretical browser risks into a coherent attack chain, AI significantly lowers the barrier for low-skilled actors to create effective malware. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AI-Generated Browser Ransomware Emerges Using File System Access API Check Point Research has identified a new form of ransomware generated by the AI model DeepSeek, which operates entirely within web browsers by exploiting the File System Access API. This attack method requires no installation or advanced technical skills, making it accessible to low-skilled cybercriminals. The researchers analyzed nearly 3,000 files attributed to DeepSeek and discovered a sample that could be transformed into a functional ransomware attack with minimal effort. The model produced a malicious application that combines various malicious functionalities, including file encryption, without needing a native payload. The attack leverages social engineering tactics to convince users to grant folder access, thereby facilitating data exfiltration. Major AI providers have restricted requests related to ransomware, but DeepSeek's lower safety controls allow for easier exploitation. This development marks a significant shift in the threat landscape, as it bridges theoretical risks with practical attack scenarios. 11 sources 65

Extracted Entities

AI models enable browser

The full story

Extracted Entities

Attack Types (2)

Platforms (1)

Tools (1)