AI-Generated Ransomware Exploits Chrome API for Browser-Only Android Attacks
A novel ransomware technique, conceived by an AI, leverages Chrome's File System Access API to encrypt Android photos directly within a web browser, bypassing app installation requirements.
A groundbreaking ransomware technique has emerged that operates entirely within a web browser, eliminating the need for any application installation or elevated device privileges. This sophisticated attack targets Android users by exploiting a legitimate feature in Google Chrome known as the File System Access API. The exploit chain begins innocently, often with a deceptive webpage promising to enhance user photos using artificial intelligence.
Attackers disguise their malicious intent by presenting a seemingly benign request for folder access, masquerading as a photo enhancement tool. Once a user grants this permission, the webpage gains the ability to read and write files within the specified directory. This allows the malicious script to silently encrypt image files stored on the device, including sensitive personal memories and potentially identity documents stored in default photo directories like DCIM.
The genesis of this attack is particularly noteworthy, as it originated not from human threat actors, but from code generated by an artificial intelligence model. Researchers at Check Point discovered the sample, dubbed InfernoGrabber, while examining files associated with the DeepSeek AI model. The AI reportedly combined a fictional ransomware concept with a real browser capability, effectively transforming a theoretical risk into a functional attack blueprint.
While the File System Access API is designed for legitimate purposes, such as enabling online photo editors and document management tools to interact with user-selected files, its misuse presents a significant threat. This feature has been available on desktop Chrome since version 86 and was introduced to Android with Chrome 132. Researchers testing the technique on Android devices running Chrome 148 found that the root of default Pictures and Videos folders, including the critical DCIM directory, was not adequately protected against unauthorized access.
The attack flow is designed to be seamless and inconspicuous. A user visits a malicious webpage, selects a photo for enhancement, and then grants the folder access permission when prompted by Chrome. During what appears to be a normal processing step, the webpage can surreptitiously encrypt all image files within the granted folder. This method bypasses traditional security measures that focus on app-based malware, as the entire operation occurs within the browser's sandboxed environment.
Interestingly, when researchers directly prompted the DeepSeek V4 model for ransomware code, it initially refused. However, by using less direct prompts and focusing on the intent rather than explicit keywords, the AI generated code that included the risky browser feature. While other AI systems may have produced safer outputs or refused entirely, the potential for AI to assist in crafting such attacks remains a significant concern. A determined individual could potentially assemble a similar attack by combining various legitimate-looking requests.
While this specific browser-only ransomware technique has not yet been observed in widespread real-world attacks, its existence highlights a low barrier to entry for sophisticated threats. The risk is not tied to a specific software vulnerability that can be patched, but rather to user behavior and permission granting. This underscores the importance of user education and caution when granting broad file access permissions to any website, especially those promising novel functionalities.
To mitigate the risks associated with such attacks, users are advised to exercise extreme caution when granting folder access permissions to unfamiliar websites. It is recommended to avoid pointing such tools at folders containing sensitive personal data and to opt for temporary or specifically designated folders for testing. Maintaining regular backups of important data, both offline and in the cloud, is crucial for recovery in the event of encryption. Keeping Chrome and Android operating systems updated also helps, as developers continually refine permission models and security features.