AI is becoming part of everyday criminal workflows - Help Net Security
A study reveals AI tools are increasingly used in cybercrime, including phishing, social engineering, and fraud, as evidenced by discussions on underground forums.Summary
A recent study analyzing conversations on cybercrime forums between January and July 2025 demonstrates a growing integration of Artificial Intelligence into criminal activities. The research, based on 2,264 messages from 1,661 contributors across 21 forums, identified four key themes: repurposing mainstream AI services like ChatGPT and DeepSeek, marketing specialized criminal AI products such as WormGPT and FraudGPT, adapting AI models for specific operations like scamming and social engineering, and debating the operational risks associated with AI use.
While experimentation with mainstream tools is widespread, a significant portion of activity centers around criminal AI brands, often functioning as resold access to mainstream models with jailbreak prompts. Experts suggest monitoring the prevalence of AI claims in underground sales listings as an indicator of broader adoption, moving from an experimental to an industrial phase. Fraud and scam operations are expected to integrate AI more rapidly than malware development due to more accessible profit incentives and limited individual protection against AI-enabled attacks.
Despite the enthusiasm, skepticism exists regarding the reliability of AI-generated code and concerns about operational security, including data logging and potential backdoors. Defenders are advised to monitor metrics like scam report volumes, phishing message interception rates, and coordinated campaign activity to detect AI-driven criminal activity. The study concludes that the integration of AI into cybercrime is in its early stages, characterized by experimentation, marketing, and ongoing debate.
(Source：Help Net Security)
