UK Cyber Agency Warns AI-Powered Malware Will Likely Hit Critical Infrastructure by 2028

Britain’s National Cyber Security Centre says it is highly likely that AI-driven malware will be used in a ransomware attack on UK critical national infrastructure before the end of 2028. The claim appears in the agency’s Annual Review 2026, which argues that artificial intelligence will make ransomware, social engineering and the hunt for software weaknesses faster and larger in scale.

State-Backed Hackers and AI Cyber Threats

The review adds that China, Russia and other nation-states will use what it calls AI cyber to pursue geopolitical aims, raising both the speed and volume of threats facing the country. It links these dangers directly to the UK’s economic and national security.

Cyber Espionage Against Politicians and Officials

Beyond ransomware, the NCSC pointed to rising spying efforts aimed at politicians, government staff and other high-risk people. Over the past year it saw steady spear phishing and more attempts to break into messaging apps. In March, Dutch intelligence agencies warned that Russian state hackers were going after officials, military personnel and civil servants worldwide, posing as Signal support to take over accounts.

Pace of Technology Change

The agency stressed that the real shift today is speed, saying a state’s ability to adopt new technology will increasingly decide how effective its attacks are.