SYMBOLCOMMON_NAMEaka. SYNONYMS
win.prompt_lock (Back to overview)

PromptLock

According to ESET Research, PromptLock is first known AI-powered ransomware. PromptLock leverages Lua scripts generated from hard-coded prompts to enumerate the local filesystem, inspect target files, exfiltrate selected data, and perform encryption. These Lua scripts are cross-platform compatible, functioning on Windows, Linux, and macOS. For its file encryption mechanism, the PromptLock ransomware utilizes the SPECK 128-bit encryption algorithm.

References
2025-08-26 ⋅ Twitter (@ESETresearch) ⋅ ESET Research
Tweet about PromptLock discovery
PromptLock

There is no Yara-Signature yet.