TLDR: The Korea Internet & Security Agency (KISA) led a joint simulation exercise with 20 Asia-Pacific nations to combat ransomware attacks leveraging generative AI. The training, involving 26 teams, focused on practical response capabilities, ransomware analysis, and recovery efforts, highlighting the growing threat of AI in cyber warfare.
The Korea Internet & Security Agency (KISA) announced on July 29, 2025, that it has successfully conducted an international joint simulation exercise aimed at bolstering defenses against ransomware attacks that utilize generative artificial intelligence (AI). This significant training initiative was carried out in collaboration with the Asia-Pacific Computer Emergency Response Team (APCERT), bringing together 26 teams from 20 countries across the Asia-Pacific region.
The exercise was designed around a realistic scenario where a virtual corporation was infected with ransomware specifically created using generative AI. Participating response teams from the various nations engaged in analyzing the sophisticated ransomware, supporting recovery efforts for the affected systems, and assessing their overall practical response capabilities in a high-stakes environment. KISA underscored the critical importance of establishing and maintaining robust backup systems throughout the training, concurrently conducting recovery drills targeting the simulated corporate entities.
This marks the second consecutive year that KISA has hosted this crucial training as the chair agency of APCERT, an international council founded in 2003 to foster cooperation among incident response teams in the Asia-Pacific region. APCERT annually conducts simulation exercises focusing on major cybersecurity challenges.
Also Read:
- Cybersecurity Hurdles Slow Generative AI Adoption in South Korean Banking Sector
- Anticipating the AI Cyber Threat Landscape: Insights from Trend Micro’s 2025 Security Report
Lee Sang-jung, head of KISA, emphasized the contemporary relevance of the training, stating, “This exercise is a practical response training conducted assuming a case of utilizing generative AI.” He further added, “We will closely respond to technological advancements and social issues and strengthen cooperation with global relevant organizations to establish a robust response system.” The increasing sophistication of cyber threats, particularly those leveraging AI, necessitates such collaborative and proactive measures to safeguard digital infrastructures across the region. Reports indicate that AI is no longer merely an auxiliary tool for cyber attacks but a core weapon, with automated AI bots accounting for a significant percentage of attempted login attacks.
