Browser-Only Ransomware Proves AI‑Generated Code Can Encrypt Files Without Installing Malware
Check Point Research turned an LLM hallucination about a nonexistent 'browser-only ransomware' into a working proof‑of‑concept that encrypts files wholly inside the browser using JavaScript and the File System Access API. The attack requires no downloaded executable, sidestepping traditional endpoint defenses and expanding the threat surface for browsers that grant file‑system permissions.