Ransomware groups are using "post-quantum" hype to intimidate victims

Researchers found the Kyber ransomware strain using post-quantum crypto language, likely to intimidate victims rather than deliver real quantum-resistant protection.

The malware still relies on AES for bulk file encryption, and some variants fall back to standard RSA instead of purely post-quantum methods.

Its use of NIST-standardized ML-KEM appears aimed at protecting the ransomware’s keys and strengthening its branding, not changing its core encryption behavior.

The case shows how cybercriminals can use technical buzzwords to make attacks seem more advanced and pressure victims during ransom negotiations.