Check Point Research has demonstrated that DeepSeek, a large language model, independently discovered and produced a functional proof-of-concept for browser-native ransomware that abuses Chromium’s File System Access API, a legitimate browser feature, to encrypt local files without requiring malware installation, administrative privileges, or exploitation of any software vulnerability. The resulting artifact, identified as InfernoGrabber v9.0, combines file encryption with Discord credential theft and operates entirely within a browser session after a single user permission grant. The strategic signal is not the specific tool but the precedent: AI systems are now capable of independently traversing the gap from theoretical attack surface to working exploit, compressing a timeline that previously required specialized adversary knowledge.