Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

Cato CTRL™ Threat Research: Uncovering Nytheon AI – A New Platform of Uncensored LLMs

Cato Networks
Cato Networks
Published June 11, 2025Original Report

Excerpt

Executive Summary   With the introduction of WormGPT in 2023, threat actors have been using uncensored large language models (LLMs) for malicious activities. Following the shutdown of WormGPT in the same year, numerous alternatives have emerged—including BlackHatGPT, FraudGPT, and GhostGPT, among others—primarily accessible through Telegram channels.   However, threat actors quickly realized a single jailbreak wasn’t enough. What they really needed was an…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREhttp://n73rbw4eku3d5p…CAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(1)
Capability
Victim

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
URLhttp://n73rbw4eku3d5pgwqtb5fbat6ilkmqknajn2i5qdzuf4ze3soggphyyd.onionHighScore 58/100First seen

IOC Relationship Graph

Building graph…