Check Point researchers found that LLMs like DeepSeek can be used to create functional browser-based ransomware. The attack leverages the File System Access API to encrypt local files without requiring native payloads. While current browser security mitigates some risks, the ease of generating such malware lowers the barrier for cybercriminals.