Skip to content
ThreatCluster

MessiahGPT AI Model Enables Ransomware and Phishing Generation

First seen 17 Aug 2026, 18:36 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •August 18, 2026 at 17:57 UTC
  • •MessiahGPT allows the generation of ransomware and phishing tools on demand.
  • •The service is marketed on BreachForums and operates through messiahgpt[.]de.
  • •Trellix researchers warn of its potential to increase automated cyberattacks.

The MessiahGPT AI service has emerged on BreachForums, allowing users to generate ransomware, phishing kits, and other malicious tools on demand. Marketed as an unrestricted offensive AI model, it operates through the domain messiahgpt[.]de and promotes a Telegram community for users. Trellix Advanced Research Center has identified this service as part of a growing underground market for offensive AI capabilities, available as a subscription service. The implications of this model could lead to a surge in automated cyberattacks, impacting various sectors by facilitating easier access to sophisticated attack tools. The current status indicates that this service is actively being marketed and utilized within the cybercriminal community.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 54d ago How this analysis works

Timeline

2026-08-17
MessiahGPT AI service discovered
The criminal AI service MessiahGPT was reported on BreachForums, enabling the creation of various malicious tools.
Gbhackers
2026-08-17
Trellix reports on MessiahGPT's capabilities
Trellix Advanced Research Center highlighted the service's features and its role in the underground market for offensive AI.
Cybersecuritynews

More articles in this cluster (2)