Get 24/7 incident response assistance from our global team
Please review the following rules before submitting your application:
1. Our main objective is to foster a community of like-minded individuals dedicated to combatting cybercrime and who have never engaged in Blackhat activities.
2. All applications must include research or a research draft. You can find content criteria in the blog. Please provide a link to your research or research draft using the form below.
Your guide to AI innovation, adoption, and acceleration in cybersecurity
In this report, we share our key investigative findings and observations, including UNC2891’s tactics, techniques, and procedures.
Your guide to AI innovation, adoption, and acceleration in cybersecurity
Learn more
Cybercrime has entered a new phase. What began as manual, opportunistic attacks in the 1990s has evolved through organized malware, Cybercrime-as-a-Service, and ecosystem-level supply chain attacks. Today, a fifth wave is underway – one defined by the weaponisation of artificial intelligence.
In this wave, AI is not simply enhancing existing tactics. It is industrialising crime, turning once human-driven skills – persuasion, impersonation, malware development – into scalable, on-demand services across the underground economy.
Group-IB’s Weaponised AI research reveals how this shift is unfolding in real time.
Based on original investigations conducted by Group-IB’s global analyst teams, the report exposes how AI is being actively adopted and monetised by threat actors worldwide:
Dark LLMs, purpose-built for criminal use, sold on underground markets with no ethical constraintsDeepfake-as-a-Service and synthetic identity kits enabling impersonation at scaleAutomated phishing, social engineering, and malware tooling designed to lower the barrier to entry for cybercrimeAI-enabled fraud and identity attacks that evade traditional detection and attributionGroup-IB’s monitoring of dark web forums shows a sharp surge in AI -related criminal activity over the past five years, with AI now embedded across the cybercrime value chain rather than used as an occasional tool.
Through infiltration of underground forums, marketplaces, and dedicated leak sites, Group-IB analysts uncovered a maturing criminal ecosystem that increasingly mirrors legitimate SaaS businesses – complete with subscription models, customer support, and rapid iteration.
Group-IB delivers comprehensive protection against modern cybercrime through an intelligence-led security ecosystem built on deep adversary insight and real-world investigations.
By combining global threat intelligence with local analyst expertise, Group-IB helps organisations detect, prevent, and respond to AI-enabled cyber threats across fraud, identity, and infrastructure – before they can scale.
We see the full picture of the evolving cyber threat landscape thanks to unique tools for monitoring the infrastructure used by cybercriminals and data from battlefields:
