Skip to content
ThreatCluster

Malicious LLMs Target Users with Ransomware and Exploits

First seen 9 Dec 2025, 01:47 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

Malicious large language models (LLMs) like WormGPT 4 and KawaiiGPT are being sold and distributed, with functionalities that include ransomware code and rapid data exfiltration methods. These tools are being marketed to cybercriminals, highlighting the evolving landscape of AI-driven cyber threats.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 184d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track WormGPT in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed