Analysis · curated 16 Jul 2026

Malicious AI on the Dark Web | Inside WormGPT, FraudGPT & the New Generation of Criminal AI Tools - Malware News - Malware Analysis, News and Indicators

Coverage timeline

15 Jul 2026dexpose.iomalware.news 16 Jul 2026mallory.ai

Why it matters

Malicious LLMs like WormGPT and FraudGPT lower the skill barrier for phishing and malware creation, eliminating the poor-grammar red flags defenders have long trained employees to spot.

A field guide from dexpose.io profiles the category of 'dark web AI' — uncensored or jailbroken LLMs like WormGPT, FraudGPT, and EvilGPT sold on underground forums to write phishing emails, generate malware, and automate fraud. WormGPT was built by fine-tuning open-source GPT-J on malware/phishing data, while other services wrap jailbroken mainstream models; FraudGPT is marketed with features spanning phishing pages, malicious code, and payment-card fraud.