Friend or Foe? AI and the Evolving Landscape of Ransomware-as-a-Service (RaaS)

This paper examines Ransomware-as-a-Service (RaaS) and its impact on cybercrime. RaaS has made sophisticated attacks accessible to a wider range of criminals, increasing the number of ransomware attacks. The paper explores how Artificial Intelligence (AI) is being used by both attackers and defenders in this evolving landscape. AI empowers RaaS attackers by improving target selection, vulnerability identification, and social engineering tactics. It also automates attack processes, making them more efficient. For defenders, AI offers potential in threat detection, vulnerability assessment, and incident response through real-time data analysis. However, challenges like model development complexity, false positives, and the need for explainable AI models exist for both sides. The paper concludes that AI use by both attackers and defenders creates an "AI arms race" in cybersecurity. It further aim(s) to illuminate future cybersecurity strategies and equip defenders with proactive measures against evolving cyber threats.