A company is selling an AI platform that advertises itself as having no limits, raising questions about the product's potential usage by cybercriminals.
The model's name is "Kriminal," and it's the subject of new research published yesterday by ThreatDown, Malwarebytes' enterprise-focused security brand. ThreatDown describes Kriminal in a blog post as "one of the newest and most popular tools in the criminal AI market."
Despite the platform's name and ThreatDown's characterization of it as a popular tool in the emerging "criminal AI" market, it's indexed on the clear web and can be found through a simple Google search. Unlike traditional exploit kits and other cybercrime services, which are often marketed directly around attack capabilities, Kriminal presents itself more like a conventional software-as-a-service (SaaS) product.
One similarity between Kriminal and illicit services is the payment method: subscriptions are purchased using cryptocurrency only. Access starts at $12.99 per month.
The Kriminal website claims 18,400-plus messages have been sent to its platform to date, with 2,300 active users and 99% of questions answered.
Makeup of a Kriminal
While Kriminal's website doesn't explicitly advertise itself as a cybercrime tool, its "WRAITH" feature offers "social engineering & persona craft" for those who pay for the highest tier of service. Another feature, the "ARCHITECT" agent, advertises an "offensive security & exploit expert." Kriminal also offers guardrail-free conspiracy discussion, uncensored image generation, open-source intelligence (OSINT) scanning for things like names and addresses, cryptocurrency tracing, and more.
Moreover, Kriminal's terms page explicitly says the service is for "research, creative, and educational purposes," and forbids activities that "use the Service in any manner that violates applicable local, national, or international law." The terms suggest Kriminal's operators distinguish between an "uncensored" AI service and an unmoderated one; the terms reference the use of manual and automated detection for illicit exploitation content involving minors, and the company says user efforts to generate such content may be sent to the appropriate authorities.