In a first, a ransomware family is confirmed to be quantum-safe
A new ransomware family called Kyber is claiming to use quantum-resistant encryption (ML-KEM), marking the first confirmed case of post-quantum cryptography in ransomware, though security researchers confirm this is primarily a psychological marketing tactic rather than a technical necessity since practical quantum threats remain years away. This demonstrates that threat actors are adopting emerging security standards to increase perceived leverage over victims and decision-makers, signaling that PQC adoption will accelerate across the threat landscape. IT leaders should recognize this trend as an indicator that quantum-safe cryptography will become a competitive differentiator in both legitimate and malicious software, requiring organizations to begin their post-quantum cryptography transition planning now.
A relatively new ransomware family is using a novel approach to hype the strength of the encryption used to scramble files—making, or at least claiming, that it is protected against attacks by quantum computers. Kyber, as the ransomware is called, has been around since at least last September and quickly attracted attention for the claim that it used ML-KEM, short for Module Lattice-based Key Encapsulation Mechanism and is a standard shepherded by the National Institute of Standards and Technology. The Kyber ransomware name comes from the alternate name for ML-KEM, which is also Kyber. For the rest of the article, Kyber refers to the ransomware; the algorithm is referred to as ML-KEM. It's all about marketing ML-KEM is an asymmetric encryption method for exchanging keys. It involves problems based on lattices, a structure in mathematics that quantum computers have no advantage in solving over classic computing. ML-KEM is designed to replace Elliptic Curve and RSA cryptosystems, both of which are based on problems that quantum computers with sufficient strength can tackle.Read full article Comments
