ThreatCluster

MessiahGPT AI Model Enables Ransomware and Phishing Generation

First seen 17 Aug 2026, 18:36 UTC GbhackersCybersecuritynews 94% similarity 67

Article Content

Browse articles
ThreatCluster

The MessiahGPT AI service has emerged on BreachForums, allowing users to generate ransomware, phishing kits, and other malicious tools on demand. Marketed as an unrestricted offensive AI model, it operates through the domain messiahgpt[.]de and promotes a Telegram community for users. Trellix Advanced Research Center has identified this service as part of a growing underground market for offensive AI capabilities, available as a subscription service. The implications of this model could lead to a surge in automated cyberattacks, impacting various sectors by facilitating easier access to sophisticated attack tools. The current status indicates that this service is actively being marketed and utilized within the cybercriminal community.

Key Points: • MessiahGPT allows the generation of ransomware and phishing tools on demand. • The service is marketed on BreachForums and operates through messiahgpt[.]de. • Trellix researchers warn of its potential to increase automated cyberattacks.

ThreatCluster AI How this analysis works

Timeline

2026-08-17
MessiahGPT AI service discovered
The criminal AI service MessiahGPT was reported on BreachForums, enabling the creation of various malicious tools.
Gbhackers
2026-08-17
Trellix reports on MessiahGPT's capabilities
Trellix Advanced Research Center highlighted the service's features and its role in the underground market for offensive AI.
Cybersecuritynews

Community

Browse all →