# Criminal Adoption of Unrestricted AI Services: MessiahGPT, Kriminal.ai, WormGPT-linked Actors and AI-Driven KYC Bypass (Flashpoint, Aug 2026 data)

> Flashpoint reports 7,461,908 illicit-community posts discussing AI in August 2026 (+34% vs July), including 751,644 posts on AI-enabled KYC bypass (+91%). Unrestricted LLM services such as MessiahGPT and Kriminal.ai are marketed for malware development, phishing kits and social engineering scripts, with distribution dominated by Telegram.

- **Published:** 2026-10-17T14:39:35Z
- **Last reviewed:** 2026-10-17T14:39:35Z
- **Canonical:** https://intel.threadlinqs.com/threat/TL-2026-3813
- **ID:** TL-2026-3813
- **Severity:** MEDIUM
- **Category:** THREAT_INTEL
- **Status:** ACTIVE
- **Detections:** 9 · **IOCs:** 15 (full data via the Threadlinqs MCP server — Purple tier)

## Description

Flashpoint's monthly AI threat report (published 2026-10-06) measured 7,461,908 posts discussing AI across illicit communities in August 2026, up nearly 34% from 5,575,564 in July. Posts about AI-enabled identity-verification (KYC) bypass rose about 91%, from 394,567 to 751,644. Telegram dominated distribution with 4,899,407 posts advertising AI services, followed by GitHub Gist (20,382), Reddit (14,084) and Pastebin (9,487). Flashpoint lists identity-verification bypass, deepfakes, phishing, malware development, fraud and vulnerability analysis as the primary criminal uses, and notes that actors chain these capabilities into coordinated workflows (for example synthetic identities combined with compromised credentials).

MessiahGPT is an unrestricted LLM service that Flashpoint attributes to the operator 'dabial leaks' (associated with WormGPT). It was first observed in January 2026, offers a free tier plus plans of $9.99-$39.99/month, and is marketed for malware, phishing kits, social engineering scripts and analysis of breached data. Flashpoint cites an August 24 Pastebin post in which a user applied it to port-scan analysis. Separately, Trellix Advanced Research Center documented a BreachForums advertisement for MessiahGPT (reported by Hackread on 2026-08-18) with the site messiahgpt.de, 50 free queries without registration, paid plans from about $8/month, cryptocurrency-only payment with no identity verification, and claimed capabilities including ransomware, infostealers, crypters, rootkits, phishing kits and fraud/carding guidance. Trellix could not independently verify the claimed model architecture, training data or performance; these are operator claims.

Kriminal.ai is priced from $12.99/month (top GHOST tier $99) and advertises built-in jailbreak prompts that circumvent safety restrictions. ThreatDown's analysis (reported by CSO Online on 2026-08-20) found it has no proprietary foundation model: it routes requests to xAI Grok (primary engine), Anthropic Claude, Mistral Large and Llama 3.3 via OpenRouter, with Tavily for live web search. It is hosted on the clearnet behind Cloudflare/Google Cloud with NowPayments crypto checkout, and sells exploit development, OSINT dossiers, on-chain tracing, social engineering and code generation, plus named GHOST-tier personas (PHANTUM, ARCHITECT, ORACLE, WRAITH).

Flashpoint also references a LAPSUS$ claim of 4 TB allegedly stolen from AI recruiting platform Mercor (proprietary AI models, candidate information, client records) and an unnamed major U.S. enterprise cloud/AI access listing. Other reporting dates the Mercor incident to early April 2026 and links it to a supply-chain compromise of the open-source LiteLLM library; Mercor confirmed a security incident. Note the date discrepancy with the Flashpoint framing. This is a trend report: no CVEs, CVSS scores or network IOCs beyond the service domains are stated, and BeaconBeagle shows no C2 config match for messiahgpt.de. Defenders should treat it as context for expected increases in AI-assisted phishing, lower-skill malware development, KYC/account-opening fraud and faster exploitation triage.

## MITRE ATT&CK

- T1588.007 Obtain Capabilities: Artificial Intelligence
- T1587.001 Develop Capabilities: Malware
- T1585 Establish Accounts
- T1595 Active Scanning
- T1598 Phishing for Information
- T1589.001 Gather Victim Identity Information: Credentials
- T1566 Phishing
- T1078 Valid Accounts
- T1195 Supply Chain Compromise
- T1657 Financial Theft
- T1684.001 Impersonation

## Sources

- [AI Threat Report: How Artificial Intelligence Is Used Across Illicit Communities](https://flashpoint.io/blog/ai-threat-report-monthly/)
- [MessiahGPT Criminal AI Service Advertised on BreachForums](https://hackread.com/messiahgpt-criminal-ai-service-breachforums/)
- ['MessiahGPT' AI Service Promises Ransomware, Phishing Kits, and Malware](https://www.esecurityplanet.com/artificial-intelligence/news-messiahgpt-malware-phishing-ai/)
- [Kriminal breaks out of Grok, Claude guardrails at $12.99](https://www.csoonline.com/article/4211952/kriminal-breaks-out-of-grok-claude-guardrails-at-12-99.html)
- [Criminal AI tool Kriminal is mostly just Grok with a jailbreak, ThreatDown finds](https://siliconangle.com/2026/08/19/criminal-ai-tool-kriminal-is-mostly-just-grok-with-a-jailbreak-threatdown-finds/)
- [No-Filter 'Kriminal' AI Platform Raises Cybercrime Concerns](https://darkreading.com/application-security/no-filter-kriminal-ai-platform-cybercrime-concerns)
- [Mercor AI Confirms Data Breach Following Lapsus$ Claims of 4TB Data Theft](https://www.cryptika.com/mercor-ai-confirms-data-breach-following-lapsus-claims-of-4tb-data-theft/)
- [Mercor, a $10 billion AI startup, confirms major data breach (Fortune)](https://fortune.com/2026/04/02/mercor-ai-startup-security-incident-10-billion/)

## Full data

Detection queries (Splunk SPL / Microsoft KQL / Sigma) and IOC values require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/threat/TL-2026-3813