Csoonline Emerging Criminal AI Platform 'Kriminal' Raises Cybersecurity Concerns
Article Content
- •Kriminal AI platform offers uncensored access to offensive cyber tools for $12.99/month.
- •The service bypasses safety guardrails of legitimate AI models, making it accessible for cybercriminals.
- •ThreatDown's research indicates Kriminal represents a shift in the commoditization of AI for cybercrime.
The 'Kriminal' AI platform, marketed as a guardrail-free service for social engineering and offensive cyber capabilities, has been identified as a significant threat in the cybercrime landscape. Priced at $12.99 per month, it allows users to access various AI functionalities, including OSINT scanning and exploit development, by bypassing safety measures of legitimate AI models like Grok and Claude. Researchers from ThreatDown report that Kriminal operates on the clearnet, making it accessible to anyone with cryptocurrency. The platform is designed to cater to cybercriminals, offering tools that can be used for malicious purposes while claiming to serve educational and research needs. The service's structure complicates efforts to shut it down, as it relies on multiple legitimate AI vendors. As AI capabilities become more commoditized, the potential for misuse increases, posing a serious challenge for cybersecurity professionals.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track Cloudflare in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…