gcdRadar
archive/Research/AIR-2025-0152
closedclosed 21 Apr 2025Research1 Research / proof of conceptAI

Darknet Forum Introduces Xanthorox AI Autonomous Cyberattack Platform

Xanthorox AI

An offensive AI system called Xanthorox AI was released on darknet forums to support cybercriminal operations. The modular platform integrates code generation, phishing, and malware creation capabilities.

first report
7 Apr 2025
last update
7 Apr 2025

Timeline · 1

  1. 7 Apr 2025Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

Sources · 1

Research and catalogues

  1. 2025-04-07
    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform
    AI Incident Database · incidentdatabase.ai/cite/1015

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

lane
Research
AI role
AI-enabled attack
categories
AI-generated malwareAI-assisted intrusionAI phishing / social engineering
severity
1 · Research / proof of concept
targets
Not applicable
owasp llm top 10
no entry for these categories
mitre atlas
AML.T0016.002 Obtain Capabilities: Generative AIAML.T0052 Phishing
tags
darknetautonomous-agentmalware-generation
dates
happened 7 Apr 2025 · first reported 7 Apr 2025
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.90 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Darknet Forum Introduces Xanthorox AI Autonomous Cyberattack Platform

https://gcdradar.vercel.app/incidents/darknet-forum-introduces-xanthorox-ai-autonomous-cyberattack · AIR-2025-0152 · closed 2025-04-21

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2025-04-07
- AI role: AI-enabled attack
- Products: Xanthorox AI

## Summary

An offensive AI system called Xanthorox AI was released on darknet forums to support cybercriminal operations. The modular platform integrates code generation, phishing, and malware creation capabilities.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-04-07: Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform (https://incidentdatabase.ai/cite/1015)

## Sources

- 2025-04-07 AI Incident Database: Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform https://incidentdatabase.ai/cite/1015

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    Claude Anthropic Report Reveals Claude Misuse in Cyberattacks and Fraud

    Breaches & attacks · Exploited · since 23 Apr 2025

    AI
  2. closed
    Claude Anthropic Identifies AI Misuse in Extortion and Ransomware Campaigns

    Breaches & attacks · Exploited · since 27 Aug 2025

    AI
  3. closed
    FBI Reports Adversarial AI Usage in Cyberattacks and Infrastructure Intrusions

    Breaches & attacks · Exploited · since 29 Apr 2025

    AI
  4. closed
    Microsoft cloud services Microsoft Blocks Millions of Bot Signups Amid AI Fraud Surge

    Breaches & attacks · Exploited · since 16 Apr 2025

    AI
  5. closed
    LAMEHUG LAMEHUG Malware Integrates LLM for Real-Time Command Generation

    Breaches & attacks · Exploited · since 10 Jul 2025

    AI
  6. closed
    Miniapps chatbots FunkSec ransomware group allegedly leverages AI tools in attacks

    Breaches & attacks · Real loss · since 10 Jan 2025

    AI