Loading malware…
WormGPT is a commercially marketed, cybercrime-oriented large language model chatbot service, rather than a malware family. It emerged in June 2023 and was promoted on underground forums as an alternative to mainstream AI assistants with fewer restrictions on malicious requests. The original offering was based on GPT-J and was designed to assist with phishing, business email compromise, social engineering, and malicious code generation. Its demonstrated role is principally content and coding assistance, not autonomous execution of complete cyberattacks.
After the original project shut down in 2023, other operators reused the WormGPT name. Later offerings, including Keanu and xzin0vich, repackaged publicly available models or API-backed services, so the name does not identify a single consistent model or implementation. Black Basta members explored WormGPT alongside other AI tools for phishing, automation, scripting, and deception; this interest does not establish operational deployment. No specific operating-system target or industry focus is established, and the extent of WormGPT's contribution to successful real-world attacks remains unknown.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
1 distinct threat actor attributed by public researchers. Open in Mallory to see the full evidence chain and overlapping campaigns.
“Funksec … uses AI-created phishing templates and and a called dubbed ‘WormGPT.’”
18 distinct techniques documented for this family, organized by ATT&CK tactic.
First, the AI could conduct reconnaissance, scraping publicly available data about target companies from search engines, social media, and other open sources...
...scanning for vulnerable servers or open network ports and attempting to breach the entry points.
Deepfake voice and video tools have advanced to the point where live video verification, once the victim’s last defense, no longer disqualifies the scammer. The Arup engineering firm deepfake in early 2024, in which a finance employee was tricked into wiring $25 million by AI-rendered “executives” on a Zoom call, is no longer an outlier.
The chatbot was trained in materials related to malware development, which is how WormGPT was born.
Malware (T1587.001) — разработка AI-малвари и вредоносных скриптов с помощью LLM
Artificial Intelligence (T1588.007) — приобретение доступа к AI-capabilities для подготовки атаки
The service follows WormGPT and FraudGPT, underground tools marketed for phishing emails, business email compromise lures, malicious scripts and malware code.
ten package names on npm impersonating real DeFi protocol and standards libraries ... The largest single cluster this week impersonated Alelo, a Brazilian corporate benefits and payment card provider ... a separate scoped-namespace campaign published twenty-one lookalike n8n-nodes-utils-helper-* packages
40 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A named cybercrime-oriented, fine-tuned AI model cited as an earlier example of threat actors adapting models with removed safeguards. No specific campaign, technical capabilities, or victims are described.
Branded criminal chatbot mentioned as background to changing underground discussion trends. The content also reports that WormGPT was breached earlier in 2026, exposing approximately 19,000 users' emails, payment data and subscription tiers; it does not detail the chatbot's offensive capabilities.
An uncensored language-model-based offensive tool described as having guardrails removed so attackers could use it to identify vulnerabilities and support malicious activity.
Named as a commodity malicious AI tool used to lower the barrier for social-engineering activity.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.