AI Makes Ransomware Attacks Harder to Detect for 83% of UAE Organisations

DUBAI — Artificial intelligence is making ransomware attacks against UAE organisations more convincing and harder to detect, with 83% of affected organisations saying AI increased the effectiveness of attacks, according to Proofpoint’s 2026 ransomware research.

The study found that ransomware has evolved beyond a one-off encryption event into a prolonged extortion model involving stolen credentials, sensitive data and repeated pressure on victims.

Proofpoint’s research surveyed 953 cybersecurity professionals across 12 countries at organisations that had previously experienced ransomware attacks.

In the UAE, 36% of successful compromises were attributed to employees not suspecting messages because they appeared authentic, underscoring how AI-generated phishing and impersonation are increasingly exploiting trust rather than purely technical vulnerabilities.

Email remains a major entry point. Around 30% of ransomware attacks affecting UAE organisations began through phishing and social engineering via email.

Among initial threat channels, 57% involved malicious attachments, 55% involved QR-code phishing, and 45% involved telephone-based attacks.

Proofpoint Chief Strategy Officer Ryan Kalember said AI has not fundamentally changed ransomware itself, but has improved the tools used to enable attacks, including phishing, malware development and credential theft.

The human element remains central. According to the study, 30% of employees interacted with malicious content during attacks.

Data theft has also become a core component of ransomware campaigns. 83% of UAE organisations affected by ransomware said data was stolen during the incident, giving attackers additional leverage through threats to publish, sell or reuse sensitive information.

Paying the ransom also provided no guarantee that the crisis would end. Around 81% of affected UAE organisations paid, while 47% of those that paid faced additional extortion demands.

The findings come amid a broader rise in cyber threats targeting the UAE. The UAE Cyber Security Council has warned about increasingly sophisticated, AI-enhanced attacks, and its official X account has highlighted the growing role of artificial intelligence in the threat landscape.

The report suggests that ransomware defence now needs to extend beyond devices and backup systems to identity protection, email security, employee awareness and verification of trusted communications.