As artificial intelligence continues to evolve, cybercriminals are finding new ways to use the technology to strengthen ransomware attacks and online fraud. Security experts have identified a growing underground marketplace where AI-powered tools are being traded to support a wide range of cybercrime activities.
Researchers say threat actors are increasingly using malicious AI models, deepfake services, and prompt-engineering tools to improve the effectiveness of their attacks. These tools are reportedly trained using stolen credentials, phishing templates, scam scripts, and other compromised data.
The rise of “Deepfake-as-a-Service” is also becoming a major concern. These services enable criminals to create fake voices, synthetic videos, and AI-generated identities that can be used in fraud schemes and social engineering campaigns. At the same time, underground forums are promoting “Prompt Engineering as a Service,” where experts develop prompts designed to bypass safety controls built into mainstream AI platforms.
Security specialists warn that AI is making it more accessible. Criminal groups are now offering AI-powered services through subscription models, API integrations, and licensing arrangements that resemble legitimate software businesses. This allows a broader range of threat actors to gain access to advanced cyberattack capabilities.
The growing adoption of AI is also accelerating ransomware development. Industry studies suggest that AI-assisted tools are being used to automate phishing campaigns, generate malicious code, evade security controls, and improve the speed and efficiency of cyberattacks.
Experts believe AI-driven threats will continue to evolve as cybercriminals adopt more sophisticated technologies. In response, cybersecurity professionals are urging organisations to strengthen threat monitoring, improve cyber hygiene practices, and combine AI-powered security solutions with human expertise.
While AI remains a powerful tool for innovation and defence, experts caution that it is also becoming an increasingly effective weapon for cybercriminals, making cybersecurity preparedness more important than ever.
Also read: Viksit Workforce for a Viksit Bharat
Do Follow: The Mainstream LinkedIn | The Mainstream Facebook | The Mainstream Youtube | The Mainstream Twitter
About us:
The Mainstream is a premier platform delivering the latest updates and informed perspectives across the technology business and cyber landscape. Built on research-driven, thought leadership and original intellectual property, The Mainstream also curates summits & conferences that convene decision makers to explore how technology reshapes industries and leadership. With a growing presence in India and globally across the Middle East, Africa, ASEAN, the USA, the UK and Australia, The Mainstream carries a vision to bring the latest happenings and insights to 8.2 billion people and to place technology at the centre of conversation for leaders navigating the future.


