The AI company officially forbids illicit use, while offering guardrail-free social engineering, offensive cybercrime, and OSINT scanning to anyone with a bit of cryptocurrency.
August 19, 2026
A company is selling an AI platform that advertises itself as having no limits, raising questions about the product's potential usage by cybercriminals.
The model's name is "Kriminal," and it's the subject of new research published yesterday by ThreatDown, Malwarebytes' enterprise-focused security brand. ThreatDown describes Kriminal in a blog post as "one of the newest and most popular tools in the criminal AI market."
Despite the platform's name and ThreatDown's characterization of it as a popular tool in the emerging "criminal AI" market, it's indexed on the clear web and can be found through a simple Google search. Unlike traditional exploit kits and other cybercrime services, which are often marketed directly around attack capabilities, Kriminal presents itself more like a conventional software-as-a-service (SaaS) product.
