The UK’s National Cyber Security Centre (NCSC) says it is highly likely that AI-powered malware will be used in a ransomware attack against the country’s critical national infrastructure by 2028. The assessment appears in the agency’s Annual Review 2026.
The report warns that artificial intelligence could increase the scale and efficiency of ransomware campaigns, social engineering and the exploitation of software vulnerabilities. It also says China, Russia and other nation-states may use AI in cyber operations to advance geopolitical goals, increasing the speed and scale of threats facing the UK.
The NCSC also highlighted cyber espionage targeting politicians, government officials and other people considered high-risk. During the year, it observed persistent spear-phishing attempts against such individuals and more efforts to compromise messaging apps.
In March, Dutch intelligence agencies warned that Russian state hackers were targeting officials, military personnel and civil servants around the world, including by impersonating Signal support to take over accounts. The NCSC said the pace of technological change is increasingly shaping how effective state-backed cyber operations can be.
Sources: Cointelegraph.