Research · curated 19 Aug 2026
How Grok unknowingly powers cybercrime
First reported threatdown.com
Coverage timeline
Single-source research — first reported, latest, and curated coincide.
Why it matters
Kriminal shows that frontier LLM guardrails can be resold as turnkey criminal tradecraft through cheap wrapper storefronts, lowering the cost barrier for attackers to access offensive AI capabilities.
ThreatDown (Malwarebytes) research analyzed 'Kriminal,' a clearnet-indexed, crypto-paid 'no filters, no guardrails' AI service marketed to cybercriminals for OSINT dossiers, exploit development, on-chain tracing, and social-engineering personas starting at $12.99/month. Analysis of Kriminal's own code found it is not an original model but a reseller wrapper around Grok, contradicting its claim to be a purpose-built criminal AI.