Ransomware Adopts ML-KEM as Cybercriminals Prepare for Post-Quantum Era
First documented ransomware use of ML-KEM reveals criminal experimentation with post-quantum tools years before viable quantum computers, exposing gaps in current cryptography migration efforts.
The first confirmed quantum-safe ransomware family shows cybercriminals actively preparing for the post-quantum era, an under-covered development that connects directly to urgent national security and cryptography upgrade needs.
Rapid7 senior security researcher Anna Širokova documented the Kyber ransomware family's integration of ML-KEM (formerly Kyber) to encapsulate AES symmetric keys, as reported by Ars Technica (arstechnica.com/security/2026/04/now-even-ransomware-is-using-post-quantum-cryptography/). The implementation uses publicly available Rust libraries for key wrapping only, not bulk encryption, and includes a one-week ransom deadline. A VMware-targeting variant claimed ML-KEM but Rapid7 analysis revealed it actually employed 4096-bit RSA (rapid7.com/blog/post/2026/04/15/technical-analysis-kyber-ransomware/). NIST selected Kyber as ML-KEM for FIPS 203 standardization in 2024 following its post-quantum cryptography competition (csrc.nist.gov/projects/post-quantum-cryptography).
Original coverage correctly noted the marketing intent to intimidate non-technical executives and the absence of practical benefit given Shor's algorithm timelines estimated at three to ten-plus years by IBM and Google research. It missed explicit linkages to documented nation-state "harvest now, decrypt later" patterns referenced in NSA's 2023 post-quantum fact sheet and U.S. National Security Memorandum-10 on quantum computing risks. Related events include CISA's ongoing PQC migration guidance for critical infrastructure and prior ransomware evolution from DES to AES-256 and ECC, showing threat actors consistently track cryptographic obsolescence.
Synthesis of the Ars Technica report, Rapid7 technical post, and NIST's ML-KEM documentation indicates implementation effort was under 100 lines of code, lowering barriers for broader ransomware kit inclusion. This development precedes widespread enterprise adoption of quantum-safe algorithms, creating asymmetric risk where criminals test PQC readiness ahead of victim organizations and government timelines.
AXIOM: Ransomware operators integrating ML-KEM shows they track cryptographic standards closer than many enterprises; expect PQC features to propagate to commodity kits well before cryptographically relevant quantum computers appear.
Sources (3)
- [1]In a first, a ransomware family is confirmed to be quantum-safe(https://arstechnica.com/security/2026/04/now-even-ransomware-is-using-post-quantum-cryptography/)
- [2]Technical Analysis: Kyber Ransomware Adopts Post-Quantum Cryptography(https://www.rapid7.com/blog/post/2026/04/15/technical-analysis-kyber-ransomware/)
- [3]NIST Post-Quantum Cryptography Standardization(https://csrc.nist.gov/projects/post-quantum-cryptography)