Bleepingcomputer

WormGPT 4: New AI Model for Cybercrime Available for $220

First seen 26 Nov 2025, 02:30 UTC • Theregister

•94% similarity •30.7

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

WormGPT 4, a new AI model designed for malicious activities, has been launched for sale at $220. This model is part of a series of AI-for-evil tools that emerged after the original WormGPT was discontinued in 2023. Sales began on September 27, 2025, with advertisements appearing on Telegram and underground forums.

ThreatCluster AI How this analysis works

Attack Flow

11 entities, 14 inferred relationships (STIX 2.1).

Technique (6)

Phishing
Ransomware
T1021.004 - SSH
T1041 - Exfiltration
T1059.001 - PowerShell
T1566.002 - Spearphishing Link

Malware (1)

WormGPT

Affected Platform (2)

Linux
Windows

Tool (2)

Paramiko
PowerShell

Relationships

Phishing targets Linux
Phishing targets Windows
Ransomware targets Linux
Ransomware targets Windows
T1021.004 - SSH targets Linux
T1021.004 - SSH targets Windows
T1041 - Exfiltration targets Linux
T1041 - Exfiltration targets Windows
T1059.001 - PowerShell targets Linux
T1059.001 - PowerShell targets Windows
T1566.002 - Spearphishing Link targets Linux
T1566.002 - Spearphishing Link targets Windows
WormGPT related to Paramiko
WormGPT related to PowerShell

Community

Browse all →

Tracked Entities in This Story

WormGPT Linux Windows

WormGPT 4: New AI Model for Cybercrime Available for $220

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story