In the wild
Realized harm
Xanthorox AI: a self-hosted, five-model offensive platform sold on darknet forums for autonomous cyber operations
AIR-2025-0019 AIR record · 2025-04-xanthorox-autonomous-offensive-ai-platform
A real party was affected. This incident caused actual consequences, not a demonstrated capability.
From the supporting source
Built entirely on private servers, Xanthorox avoids using public APIs or cloud services, significantly reducing its visibility and traceability.infosecurity-magazine.com
The record
Disclosed
2025-04-07
Occurred
2025-03
Vendor
unattributed darknet developers
Product
Xanthorox AI
Risk domain
Tool misuse › Supply chain vulnerabilities
System type
Generative model
Who acted
Human acted on output (contested) — an offensive platform sold to operators who run the attacks
Attack surface
Multi-agent system
Autonomy level
Semi-autonomous
Initial vector
Purpose built malicious system
Impact type
Ecosystem abuse
Confidence
High
Submitted by
EAI Internal
Crosswalk
- OWASP Agentic Top 10 (2026)
- ASI04 – Agentic Supply Chain Vulnerabilities
- MITRE ATLAS
- AML.T0040 – AI Supply Chain Compromise
- NIST AI RMF
- MAP 4.1
- EU AI Act
- Annex III §2
- ISO/IEC
- TR 24028; 42001; 23894
- AIUC-1
- B. Security
- Scope
- tool failure
- Mitigation
- Scan dependencies and container images for vulnerabilities; Use trusted sources.
- Taxonomy
- Enkrypt AI agent risk taxonomy · Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery
Blast radius
sold in cybercrime communities as a full-spectrum offensive toolkit; targets unbounded
Capability abused
Defense & remediation
Recorded defense
none applicable; runs on private infrastructure outside any provider's control
Guardrail kinds
None
Guardrail outcome
Not applicable
Fix shipped
none possible; no provider account to terminate
Taxonomy & references
Curator notes
The structurally important record in the malicious-AI-tooling line. WormGPT and FraudGPT were wrappers relaying to mainstream APIs, so provider enforcement could reach them. Xanthorox is self-hosted across five specialised models, which removes the chokepoint every account-termination remedy in this corpus depends on. Vendor claims about capability are marketing and are not independently verified; the existence and distribution of the platform are. AI Incident Database incident 1015.
Supporting sources
Cite as
Enkrypt AI. "Xanthorox AI: a self-hosted, five-model offensive platform sold on darknet forums for autonomous cyber operations". AIR, AIR-2025-0019. https://agentincident.vercel.app/i/AIR-2025-0019/ (accessed 2026-10-19).