The cybersecurity landscape is shifting beneath our feet. For years, UK SMEs have been battling ransomware that follows a predictable, albeit devastating, script: infiltrate, encrypt, and demand payment. However, the recent discovery by ESET researchers of "PromptLock"—the first identified instance of AI-powered ransomware—signals that the era of static, rule-based malware is drawing to a close. While PromptLock is currently viewed as a proof-of-concept rather than a widespread weapon, its existence is a watershed moment. It demonstrates that cybercriminals are no longer just using AI to write phishing emails; they are integrating large language models (LLMs) directly into the malware’s decision-making process. For business owners and IT managers across the UK, this serves as a definitive wake-up call: the tools we use to defend our networks must evolve just as rapidly as the threats designed to breach them.
What PromptLock actually means
To grasp why PromptLock is raising concerns among cybersecurity professionals, one must understand its distinction from conventional ransomware. Standard ransomware relies on pre-programmed instructions—a fixed "if this, then that" logic—which security software often identifies through signature matching or known behavioural patterns.
PromptLock, conversely, employs a large language model (LLM), the gpt-oss-20b model, running locally via the Ollama API. By executing AI code directly on an infected machine, this malware can dynamically generate malicious Lua scripts. This means PromptLock doesn't need a heavy payload of pre-written instructions. Instead, it can "think" and adapt in real-time, deciding which files are most valuable to encrypt or exfiltrate based on its specific environment.
The choice of Go (Golang) as its programming language is also significant. Go is cross-platform, allowing code to be deployed across Windows, Linux, and macOS environments with minimal friction. For an SME, this implies a single infection vector could potentially compromise your entire mixed IT estate, from Windows workstations to Linux back-end servers.
Why it matters for UK SMEs
For UK SMEs, the emergence of AI-powered ransomware like PromptLock represents more than just a technical curiosity; it’s a direct threat to commercial viability and regulatory standing. The immediate impact of a successful ransomware attack is often operational paralysis. Critical systems become inaccessible, data is locked, and business grinds to a halt. This downtime translates directly into lost revenue, damaged customer relationships, and potentially irreversible reputational harm.
Beyond the immediate disruption, the regulatory implications are substantial. Under the UK General Data Protection Regulation (GDPR), any ransomware attack that leads to the exfiltration or loss of personal data must be reported to the Information Commissioner’s Office (ICO) within 72 hours. Failure to comply, or if the breach stems from demonstrable security negligence, can result in significant fines, potentially up to 4% of annual global turnover or £17.5 million, whichever is higher. For an SME, such a penalty could be ruinous.
Furthermore, the National Cyber Security Centre (NCSC) consistently advises UK businesses to adopt fundamental cyber hygiene practices. Frameworks such as Cyber Essentials are not merely suggestions; they are a recognised benchmark for demonstrating a serious approach to cybersecurity. Achieving Cyber Essentials certification signals to clients, insurers, and regulators that your organisation has implemented the five core technical controls designed to prevent the vast majority of commodity cyber-attacks. With adaptive threats like PromptLock on the horizon, these foundational defences become even more critical. They provide a structured approach to mitigating risk, ensuring your business is not an easy target, and safeguarding your commercial interests in an increasingly hostile online environment.
How to defend against AI-powered ransomware, a practical walkthrough
While the emergence of AI-driven threats might feel overwhelming, the core principles of robust cybersecurity remain the most effective way to protect your business. You do not need to fight AI with AI; you need to fight it with rigorous, layered security hygiene.
1. Transition to Advanced EDR Solutions
Traditional signature-based antivirus solutions are becoming increasingly inadequate against adaptive threats. PromptLock’s ability to dynamically generate malicious scripts means it can bypass defences looking for known patterns. You need Endpoint Detection and Response (EDR) solutions that monitor for suspicious behaviour rather than just known malicious files. EDR tools analyse processes, network connections, and file system activities for anomalies—such as an application attempting to run an API call to an AI model, unexpected mass-file modifications, or unusual privilege escalations. They can automatically detect, contain, and often remediate threats, isolating an infected device before widespread damage occurs. Modern EDR systems also leverage cloud-based threat intelligence to identify emerging attack techniques.
2. Implement and Test the 3-2-1 Backup Rule
No matter how sophisticated the ransomware, it cannot encrypt data that isn't connected to the network. A robust backup strategy is your ultimate insurance policy.
- Three copies of data: Maintain your primary data and at least two separate backup copies.
- Two different media: Store these backups on different storage types (e.g., local server and cloud storage, or network-attached storage and tape).
- One off-site/offline: This is the most critical component. An immutable, offline backup, physically disconnected from your network or stored in a secure, air-gapped cloud environment, ensures that even if your primary systems are compromised, your critical data remains safe and recoverable. Crucially, these backups must be regularly tested to confirm their integrity and recoverability. We often find that SMEs neglect to test their recovery processes until it's too late, only to discover their backups are corrupted or incomplete.
3. Adopt a Zero-Trust Mindset and Enforce Multi-Factor Authentication (MFA)
The traditional network perimeter is largely obsolete. With remote and hybrid work models, your staff access data from anywhere. Implement Zero-Trust principles, where every user and device must be continuously verified, regardless of whether they are inside or outside the office walls. This means no implicit trust.
Multi-Factor Authentication (MFA) is non-negotiable. It should be enforced on every single account that can access your business data and systems—email, cloud applications, VPNs, and internal systems. If an attacker steals a password, they still shouldn't be able to access your systems without that second factor. On a recent client tenant audit we found 12 out of 30 users in a Hampshire-based engineering firm had no MFA enrolled on their Microsoft 365 accounts, leaving a significant vulnerability. Rectifying this was our immediate priority.
4. Comprehensive Patch Management and Vulnerability Scanning
Unpatched software and operating systems are prime targets for attackers. PromptLock, or similar future threats, will likely exploit known vulnerabilities to gain initial access. Implement a rigorous patch management programme that ensures all operating systems, applications, and firmware are updated promptly. This includes workstations, servers, network devices, and IoT devices. Regular vulnerability scanning should be conducted to identify weaknesses in your infrastructure before attackers do. This proactive approach helps close common entry points.
5. Build a Culture of Vigilance with Regular Security Awareness Training
Technology is only one half of the equation; human error remains a significant vulnerability. AI-driven tools are making phishing emails and social engineering attacks more sophisticated and convincing than ever, removing the obvious "tells" like typos or broken English.
- Regular Security Awareness Training: Conduct frequent, engaging training sessions that simulate modern phishing attempts and educate staff on the latest social engineering tactics.
- Establish Clear Verification Protocols: If an urgent email arrives—even from a known contact—requiring a password reset, a bank transfer, or access to sensitive documents, staff must have a secondary, out-of-band channel (e.g., a phone call to a known number) to verify the request.
- Empower Your Team: Create a culture where "reporting" a suspicious email or activity is praised, not punished. If an employee clicks a link or makes a mistake, they should feel comfortable notifying IT immediately rather than hiding it out of fear, which allows threats to fester.
Common mistakes we see
Even with good intentions, UK SMEs often make common errors that compromise their security posture:
- Neglecting backup testing: Many businesses have backups but fail to regularly test if they are recoverable and complete, only discovering issues during a crisis.
- Inconsistent MFA deployment: Multi-Factor Authentication is often deployed partially, leaving critical accounts or systems unprotected.
- Outdated software and systems: Patch management is frequently overlooked, leaving known vulnerabilities open for exploitation.
- Underestimating social engineering: Staff training is often a one-off event, failing to keep pace with evolving phishing and social engineering tactics.
- Over-reliance on basic antivirus: Believing that a simple antivirus solution is sufficient protection against sophisticated, adaptive threats.
Key Takeaways
The arrival of PromptLock is a clear signal that the cyber-threat landscape is entering a new, more automated phase. To stay ahead, keep these points in mind:
- AI amplifies criminal capabilities: Expect ransomware to become faster, more adaptive, and better at identifying high-value data.
- Prioritise behavioural security: Move toward EDR solutions that focus on anomaly detection over static signature-based defences.
- Secure your data with tested backups: Ensure you have immutable, offline backups that are regularly verified for recoverability.
- Enforce Zero-Trust and MFA: Verify every user and device, and implement Multi-Factor Authentication on all access points.
- Invest in ongoing human defence: Regular security awareness training is crucial to counter increasingly convincing social engineering attacks.
When to call in help
We understand that for many business leaders, keeping up with the rapid pace of AI development and the associated security risks is a full-time job in itself. You don't have to navigate this complexity alone. At Black Sheep Support, we specialise in managing the IT and security infrastructure for UK SMEs, ensuring you have the tools, processes, and expertise to remain resilient against both today’s threats and tomorrow’s AI-driven risks. To be candid, most SMEs lack the internal resources or specialist knowledge required to build and maintain an effective defence against threats of this calibre. We provide that expertise.
To take the next step
