AI-Generated Browser Ransomware Abuses Chromium API on Windows, Linux, macOS, Android

Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combining "unrealistic browser-malware concepts with a real browser capability" to turn it into a working ransomware technique that runs entirely inside the browser on both Windows and Android devices. "This is the first documented case where a frontier AI model

Report facts: Check Point documented an AI-generated browser-ransomware sample, InfernoGrabber v9.0, that uses Chromium’s File System Access API after user-granted permission to read, exfiltrate, encrypt, and overwrite files inside the browser on Chromium-family browsers, including Windows and Android. The research says the technique was derived from a DeepSeek-generated sample that combined unrealistic malware ideas with a real browser capability, and it does not require a native payload or browser exploit. CyberSE.AI analysis: this is a clear case of malicious AI use because frontier models are being used to operationalize ransomware concepts into a practical attack path, so organizations should treat browser permission flows as high-risk attack surfaces and test controls against browser-native malware abuse.