Monday, February 10, 2025
HomeCyber AIWormGPT: Cybercriminals AI Tool Gained Over 5,000 Subscribers in Just a Week

WormGPT: Cybercriminals AI Tool Gained Over 5,000 Subscribers in Just a Week

Published on

SIEM as a Service

Follow Us on Google News

The revolutionary innovations by AI (Artificial Intelligence) include generative AI that has various creative potential, but along with that it also raises serious concerns with malicious tools like WormGPT.

Since it’s a powerful generative AI-based tool, WormGPT enables attackers to create their own custom hacking tools that pose major cybersecurity challenges.

Just after its launch, WormGPT’s Telegram channel gained more than 5,000 active subscribers in just a week, showing the rapid adoption of the tool by threat actors to perform illicit activities and attacks.

WormGPT

WormGPT is a malicious AI tool that’s presented as a blackhat alternative to GPT models, using GPT-J LLM with the following key features:-

  • Unlimited character support
  • Chat memory retention
  • Code formatting
WormGPT advertisement on Telegram (Source – SOCRadar)

The developers of this AI tool assert its potential for malware, BEC phishing, and hacking tools, ensuring no user activity logs, and they accept cryptocurrency payments only.

With the continuous addition of new upgrades, WormGPT now permits users to import its code directly into their editor, showcasing its versatility.

WormGPT new feature showcase (Source – SOCRadar)

While a website exists, WormGPT’s Telegram channel, created on July 16, 2023, has gained over 5,000 subscribers, becoming more popular for feature and pricing promotions, reads SOCRadar report.

WormGPT reaches 5K users (Source – SOCRadar)

WormGPT for BEC Attacks

AI advancements like OpenAI’s ChatGPT enable hackers to conduct convincing business email compromise (BEC) attacks with personalized and realistic fake emails, increasing their chances of success.

Generative AI in BEC attacks has dual benefits, and here below we have mentioned them:-

  • Flawless grammar for genuine appearance and simplicity.
  • Enabling less skilled threat actors to conduct sophisticated cybercrime.

Recommendations

Defending against AI-driven BEC attacks demands a multi-layered strategy, blending tech solutions and user awareness.

Here below we have mentioned the recommendations offered by the cybersecurity analysts:-

  • AI Detection Tools
  • Email Authentication Protocols
  • User Training and Awareness
  • Email Filtering and Whitelisting

Stay up-to-date with the latest Cyber Security News; follow us on GoogleNews, Linkedin, Twitter, and Facebook.

Tushar Subhra
Tushar Subhra
Tushar is a Cyber security content editor with a passion for creating captivating and informative content. With years of experience under his belt in Cyber Security, he is covering Cyber Security News, technology and other news.

Latest articles

New ‘BYOTB’ Attack Exploits Trusted Binaries to Evade Detection, Researchers Reveal

A recent cybersecurity presentation at BSides London 2024 has unveiled a sophisticated attack technique...

SAML Bypass Authentication on GitHub Enterprise Servers to Login as Other User Account

A severe security vulnerability, tracked as CVE-2025-23369, has been identified in GitHub Enterprise Server...

NanoCore RAT Attack Windows Using Task Scheduler to Captures keystrokes, screenshots

NanoCore, a notorious Remote Access Trojan (RAT), continues to pose a significant threat to...

Hackers Exploiting Google Tag Managers to Steal Credit Card from eCommerce Sites

In a concerning development, cybercriminals are leveraging Google Tag Manager (GTM), a legitimate tool...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

New ‘BYOTB’ Attack Exploits Trusted Binaries to Evade Detection, Researchers Reveal

A recent cybersecurity presentation at BSides London 2024 has unveiled a sophisticated attack technique...

SAML Bypass Authentication on GitHub Enterprise Servers to Login as Other User Account

A severe security vulnerability, tracked as CVE-2025-23369, has been identified in GitHub Enterprise Server...

NanoCore RAT Attack Windows Using Task Scheduler to Captures keystrokes, screenshots

NanoCore, a notorious Remote Access Trojan (RAT), continues to pose a significant threat to...