Ransomware Already Prepared for a Quantum Future You’re Not Ready For

5% of total IT security budgets. That’s what Forrester predicts organizations will be spending on quantum security by 2026. For most companies, that number probably feels abstract — a future problem, something to revisit after the next board meeting. Then a ransomware group went ahead and made it a today problem.

Security researchers at Rapid7 confirmed this week that a relatively new ransomware family is wrapping its AES-256 file-encryption keys with ML-KEM-1024 — a post-quantum key encapsulation mechanism. That’s not marketing fluff from the attackers. That’s a verified technical implementation. The group’s Windows variant is, by any reasonable definition, quantum-safe. And it’s the first ransomware family confirmed to be exactly that.

I review AI and security toolkits for a living. I spend a lot of time looking at what vendors are selling versus what actually works. And I’ll be honest with you: the post-quantum cryptography space has felt, for a while now, like a solution in search of an urgent problem. Vendors have been pitching post-quantum readiness as a forward-looking investment. Something prudent. Something you’d get around to.

This news reframes that entirely.

What ML-KEM-1024 Actually Means Here

ML-KEM (formerly known as CRYSTALS-Kyber) is one of the algorithms standardized by NIST as part of its post-quantum cryptography project. ML-KEM-1024 is the highest security level variant. When Rapid7 says the ransomware wraps its AES-256 keys with this algorithm, what that means practically is this: even if you somehow got your hands on a future quantum computer capable of breaking traditional asymmetric encryption, you still couldn’t decrypt the victim’s files without the attacker’s private key.

The attackers aren’t using quantum computing. They’re using quantum-resistant encryption — which is available right now, today, to anyone who wants to implement it. The barrier to entry is low. The impact on defenders is significant.

AES-256 on its own is already considered solid against classical attacks. Wrapping those keys in ML-KEM-1024 is, in a sense, overkill for the current threat environment. But that’s exactly the point the attackers seem to be making. They’re signaling that their encryption cannot be broken by any foreseeable decryption effort — classical or quantum. It’s a confidence move as much as a technical one.

Why This Matters for the Toolkit Space Right Now

From where I sit, reviewing tools that organizations actually use to defend themselves, this development exposes a gap that’s been quietly growing. Most endpoint detection and response tools, backup solutions, and incident response playbooks were not built with post-quantum encryption in mind. They were built to handle the threats that existed when they were designed.

The encryption itself isn’t the only problem. Detection is. If a ransomware payload is using newer cryptographic primitives, some signature-based and behavior-based detection tools may not flag it the same way they’d flag a known family using older methods. The novel approach here isn’t just about making decryption harder — it potentially makes the attack harder to categorize and respond to quickly.

For teams evaluating their security stack, this is a real signal to start asking vendors direct questions. Does your solution account for post-quantum encrypted payloads? How does your incident response workflow change when decryption assistance is off the table entirely? These aren’t hypothetical questions anymore.

The Uncomfortable Honest Take

A lot of the post-quantum security products I’ve reviewed over the past two years have been pitched as preparation for a distant quantum computing threat. The sales narrative has always been forward-looking. “Get ahead of it now.” That framing, while not wrong, made it easy for security teams to deprioritize.

What this ransomware family has done is collapse that timeline. The threat isn’t waiting for quantum computers to exist. Attackers are already using the defensive side of post-quantum cryptography offensively. They’ve taken algorithms designed to protect data from future quantum attacks and turned them into a tool that makes ransom demands harder to escape.

That’s a genuinely uncomfortable position for defenders to be in. The tools designed to protect you are being used against you, and the urgency that vendors have been trying to manufacture for years just became real on its own.

If you’re in the middle of a security toolkit review right now, post-quantum readiness just moved up the checklist. Not because of a vendor pitch. Because a ransomware group made the argument for them.

🕒 Published: April 28, 2026