WormGPT is a malware family tracked by ThreatCluster, appearing in 13 threat clusters built from 14 intelligence report mentions.
WormGPT is a malware family tracked across 13 threat clusters and 14 intelligence report mentions on ThreatCluster. First observed November 14, 2025; most recent activity May 28, 2026.
Threat actors are increasingly using Vercel's generative AI tool, v0[.]dev, to create realistic phishing websites that mimic well-known brands. Cofense has observed a rise in campaigns utilizing this tool, which allows…
A report from Palo Alto Networks' Unit 42 reveals a growing underground market for AI-powered hacking tools on dark web forums. These tools, including custom and jailbroken large language models, are being sold to…
In 2026, the rise of agentic AI is transforming how businesses operate, particularly in the financial services sector. This new technology allows for autonomous decision-making, which increases the potential impact of…
Roy Shelton, CEO of Connectus Business Solutions, has advised small and medium-sized enterprises (SMEs) to improve their cybersecurity practices as new data reveals a significant rise in cyber-attacks. A government…
Cybercriminals are selling lifetime access to AI chatbots WormGPT and KawaiiGPT for $220. These tools are designed to bypass ethical restrictions of mainstream AI, enabling users to generate phishing emails, create…
KawaiiGPT, an open-source tool described as a 'cute' variant of WormGPT, has been released on GitHub. Developed by MrSanZz and contributors, it offers a free alternative to paid AI models, utilizing technologies such as…
Radware's 2026 Global Threat Report indicates a 168% increase in distributed denial-of-service (DDoS) attacks, with network-layer attacks targeting layers 3 and 4 of the OSI model. The report highlights peak attack…
Malicious large language models (LLMs) like WormGPT 4 and KawaiiGPT are being sold and distributed, with functionalities that include ransomware code and rapid data exfiltration methods. These tools are being marketed…
WormGPT 4, a new AI model designed for malicious activities, has been launched for sale at $220. This model is part of a series of AI-for-evil tools that emerged after the original WormGPT was discontinued in 2023.…
Cyber attackers are increasingly targeting compromised identities, with stolen credentials causing 22% of all intrusions according to Verizon's 2025 Data Breach Investigation Report. A report by Rubrik Zero Labs…
WormGPT is a malware family tracked by ThreatCluster, appearing in 13 threat clusters built from 14 intelligence report mentions.
The most recent intelligence report mentioning WormGPT on ThreatCluster is dated May 28, 2026. Activity was first observed November 14, 2025, giving a tracked span from then to May 28, 2026.
Across ThreatCluster reporting, WormGPT most frequently co-occurs with Lazarus, Sidewinder, Transparent Tribe, Data Breach, DDoS, among 12 tracked related entities.
The most significant recent cluster is “Threat Actors Exploit Vercel's GenAI for Phishing Campaigns” (5 articles · Updated May 7, 2026). WormGPT appears across 13 threat clusters in total, listed above with sources.
WormGPT appears in 14 intelligence report mentions across 13 deduplicated threat clusters, aggregated from 17,000+ monitored sources.