Criminal AI tool Kriminal is mostly just Grok with a jailbreak, ThreatDown finds
Criminal AI tool Kriminal is mostly Grok + jailbreak. ThreatDown exposes how bad actors are just renting legitimate models.
Why it matters
Practitioners and security teams need to understand that malicious AI services often aren't novel systems—they're circumvented versions of commercial models. This shapes threat modeling, vendor lock-in risks, and how to detect/prevent jailbreak-as-a-service offerings in enterprise environments.
The key facts
10 to knowKriminal runs on SpaceX's Grok (rented from legitimate AI industry)
Tool uses jailbreak layer rather than proprietary capability
ThreatDown (Malwarebytes security division) published research
Kriminal positioned as 'criminal AI market' tool
Finding: Kriminal owns almost nothing it sells
Kriminal runs on SpaceX's Grok, not proprietary AI
Service is essentially a jailbreak wrapper around a legitimate frontier model
Research by ThreatDown (Malwarebytes security division)
Kriminal is among the newest and most popular criminal AI tools
Highlights gap between perceived and actual technical sophistication in criminal AI market
Go to the source
SiliconAnglesiliconangle.com
Publisher excerpt: ThreatDown, the business security arm of Malwarebytes Inc., said in new research published today that Kriminal, one of the newest and most popular tools in the criminal artificial intelligence market, owns almost nothing it sells. The service runs on SpaceXAI’s Grok, rented from the same legitimate…