Loading story…
Underground operators are increasingly packaging generative AI into criminal AI-as-a-service offerings that support phishing, fraud, impersonation, malware modification, translation, and post-breach data analysis. Reporting on the market describes branded tools such as FraudGPT, GhostGPT, and WormGPT, but says many are little more than wrappers around legitimate models, stolen accounts, or hijacked API keys rather than fully autonomous hacking platforms. Researchers also highlighted a parallel market for deepfake-enabled abuse, including voice cloning, face swaps, fake selfies, and virtual camera injection used for KYC bypass, synthetic identity fraud, and onboarding scams.
Sophos separately identified a malware development lab using AI tools including Cursor and Claude Opus to speed ransomware-related coding, payload refinement, and evasion testing. The framework reportedly generated Python-driven Rust and Go malware modules, customized Cobalt Strike profiles, Telegram-based command channels, Cloudflare Worker intermediaries for command-and-control traffic, code-injection scripts targeting legitimate Windows applications, and AI-assisted Active Directory reconnaissance. Researchers said the operation tested nearly 80 modules against more than 70 evasion methods across Sophos, CrowdStrike, and Microsoft defenses, reinforcing that the immediate risk is not autonomous AI malware but faster, cheaper, and more scalable attacker workflows.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
Sophos researchers uncovered a malware development framework that used AI tools such as Cursor and Claude Opus to accelerate ransomware-related software development and evasion testing. The lab included payload generation, customized Cobalt Strike profiles, Telegram-based command channels, Cloudflare Worker intermediaries, and automated Active Directory reconnaissance agents.
Rapid7 published research stating that the underground market for criminally oriented generative AI had shifted from standalone "evil chatbots" to a broader Criminal AI-as-a-Service ecosystem used for phishing, fraud, impersonation, malware modification, translation, and post-breach data exploitation. The report also highlighted markets for stolen AI accounts, hijacked API keys, and deepfake-enabled fraud services.
Abnormal Security published a blog post focused on FraudGPT as a malicious generative AI development. The reference identifies this publication date explicitly but provides no further event details in the supplied content.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
4 references tracked. Mallory keeps watching after this page renders.
cybercenter.space
Open sourcecysecurity.news
Open sourcerapid7.com
Open sourceabnormalsecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Security researchers and industry commentary describe a broader rise in **AI-assisted cybercrime**, with attackers using generative AI to improve phishing lures, clone legitimate login pages, and scale social-engineering operations. Reporting highlights that phishing remains a leading initial access vector, while **phishing-as-a-service** and AI-generated content are making campaigns more convincing and easier to produce at volume. IBM similarly warns that AI is acting as a force multiplier for attackers, lowering the cost of malware development and enabling more disposable, harder-to-attribute malicious tooling. Kaspersky documented active campaigns in which threat actors used **Google Search ads** and fake documentation pages to distribute the **AMOS** infostealer on macOS and **Amatera** on Windows, disguising the malware as popular AI tools including **OpenClaw**, **Claude Code**, and **Doubao**. By contrast, ZDNET's article focuses on the business and product-security shortcomings of Moltbook and OpenClaw acquisitions rather than a specific threat campaign, making it adjacent but not part of the same security event. The material overall is **not fluff** because it includes substantive threat reporting and technical security analysis, even though the references describe related developments rather than one discrete incident.
Jun 29, 2026
Cybercrime forums have sharply increased discussion and sales activity around malicious AI tools, with researchers reporting a **219% rise** in mentions of dark AI tools and tactics and a **52% increase** in references to jailbreaking mainstream platforms such as ChatGPT. These offerings include jailbroken versions of public generative AI services and customized tools built on open-source large language models, often sold as AI-as-a-Service to support phishing, business email compromise, deepfakes, fraud, vulnerability analysis, malware development, identity fraud, password attacks, credential stuffing, and DDoS operations. Reporting on the underground market says well-known brands such as **WormGPT** and **FraudGPT** are only the most visible examples of a broader ecosystem of rebranded, resold, and short-lived criminal services. Analysts say the main effect of these tools is not breakthrough offensive capability but the removal of safety guardrails, making it easier for lower-skilled actors to generate convincing scam content and some malicious code; the market has also shifted toward repurposed open-source uncensored models, while scams targeting criminals and a reported leak of nearly **19,000** WormGPT user accounts highlight instability and risk inside the ecosystem itself.
Jul 15, 2026
Multiple reports describe threat actors abusing *AI-adjacent* and open-source distribution channels to deliver malware or manipulate automated agents. Straiker STAR Labs reported a **SmartLoader** campaign that trojanized a legitimate-looking **Model Context Protocol (MCP)** server tied to *Oura* by cloning the project, fabricating GitHub credibility (fake forks/contributors), and getting the poisoned server listed in MCP registries; the payload ultimately deployed **StealC** to steal credentials and crypto-wallet data. Separately, researchers observed attackers using trusted platforms and SaaS reputations for delivery and monetization: a fake Android “antivirus” (*TrustBastion*) was hosted via **Hugging Face** repositories to distribute banking/credential-stealing malware, and Trend Micro documented spam/phishing that abused **Atlassian Jira Cloud** email reputation and **Keitaro TDS** redirects to funnel targets (including government/corporate users across multiple language groups) into investment scams and online casinos. In parallel, research highlights emerging risks where **AI agents and AI-enabled workflows become the target or the transport layer**. Check Point demonstrated “**AI as a proxy**,” where web-enabled assistants (e.g., *Grok*, *Microsoft Copilot*) can be coerced into acting as covert **C2 relays**, blending attacker traffic into commonly allowed enterprise destinations, and outlined a trajectory toward prompt-driven, adaptive malware behavior. OpenClaw featured in two distinct security developments: an OpenClaw advisory described a **log-poisoning / indirect prompt-injection** weakness (unsanitized WebSocket headers written to logs that may later be ingested as trusted context), while Hudson Rock reported an infostealer incident that exfiltrated sensitive **OpenClaw configuration artifacts** (e.g., `openclaw.json` tokens, `device.json` keys, and “memory/soul” files), signaling that infostealer operators are beginning to harvest AI-agent identities and automation secrets in addition to browser credentials.
Jun 29, 2026