Cybercrime Forums Show Skepticism Toward Criminal GPT Services

Sophos X-Ops found that cybercrime forums including Exploit, XSS, Breach Forums, and Hackforums are discussing large language models, but adoption remains limited and cautious. Researchers observed multiple GPT-branded services marketed to criminals—such as WormGPT, FraudGPT, Evil-GPT, DarkGPT, WolfGPT, BlackHatGPT, HackBot, PentesterGPT, PrivateGPT, and XXXGPT—yet many forum users questioned whether the tools were effective, accused some offerings of being scams, or dismissed them as little more than jailbreak prompts wrapped in criminal branding.

The activity that did appear was largely experimental rather than operational. Sophos reported that most observed uses focused on social engineering, routine coding help, jailbreak attempts, and trading compromised ChatGPT accounts, while examples of AI-generated malware or attack tooling were rare, generally unsophisticated, and often Python-based. Forum participants also raised concerns that using ChatGPT could expose their activity to monitoring, leak operational details, or strengthen defensive systems, prompting some to favor offline or self-hosted models instead of mainstream AI services.