pitch

Pitch is the alias of a cybercriminal operator associated with the darknet-hosted service DIG AI, a so-called dark LLM marketed for illicit and offensive use. The actor has been observed promoting this service on underground marketplaces in criminal ecosystems that also trade narcotics and compromised financial data. DIG AI is positioned as a crime-enablement platform that lowers the barrier to cybercrime by providing uncensored generative AI capabilities to users seeking malicious or illegal outputs. Activity linked to Pitch centers on operating and advertising a Crime-as-a-Service offering that can assist with malicious code generation, including obfuscated malware and web shells, as well as phishing and malware injection workflows. The associated platform has also been reported to support production of deepfakes and other illicit synthetic media. The actor’s role, as supported by available reporting, is primarily that of an operator and promoter of criminal AI infrastructure rather than a traditionally tracked intrusion set with documented victimology across named campaigns. Pitch is notable for enabling cybercriminal capability development and post-compromise tradecraft through AI-assisted tooling. High-confidence reporting supports links to malicious code generation, data-theft-enabling web shell creation, and broader criminal service promotion in underground markets. Attribution to a specific state sponsor or national nexus is not currently available.