Dark LLMs refer to accessible, paid-on-demand AI-powered cybercrime tools and services that criminals can rent to automate or assist wrongdoing.
Overview
Dark LLMs refer to accessible, paid-on-demand AI-powered cybercrime tools and services that criminals can rent to automate or assist wrongdoing. They typically provide ready-made AI capabilities at low cost, lowering the technical barriers to launching cyberattacks, and can be scaled for diverse operations. This development marks a significant shift in threat actor capabilities and attack surface, as more criminals gain access to sophisticated AI assistance.
Related Threat Clusters
-
AI Tools Now Available for Rent to Facilitate Cybercrime
Cybercriminals are increasingly utilizing AI technologies, such as weaponized language models and deepfakes, as readily accessible tools for cybercrime. Researchers at Group-IB report that these technologies have…
2 articles · Updated January 21, 2026
Recent Intelligence Reports
- For the price of Netflix, crooks can now rent AI to run cybercrime — Theregister · January 20, 2026