Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Cato CTRL™ Threat Research: Uncovering Nytheon AI – A New Platform of Uncensored LLMs
Excerpt
Executive Summary With the introduction of WormGPT in 2023, threat actors have been using uncensored large language models (LLMs) for malicious activities. Following the shutdown of WormGPT in the same year, numerous alternatives have emerged—including BlackHatGPT, FraudGPT, and GhostGPT, among others—primarily accessible through Telegram channels. However, threat actors quickly realized a single jailbreak wasn’t enough. What they really needed was an…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | http://n73rbw4eku3d5pgwqtb5fbat6ilkmqknajn2i5qdzuf4ze3soggphyyd.onion | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…