A new research claim points to an uncomfortable pattern: generative AI can help assemble ransomware-like workflows inside ordinary web pages, where one permission click may matter more than a downloaded file.