[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fV92Etp4QYQ9PC65st6O5jFnYQaQMxsz8t_UIJJavju0":3},{"article":4,"iocs":48,"watch_terms":49,"solutions":50,"lesson":81},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"3ad0d610-09ab-44b0-8e4a-6de6424e71d2","No-Filter 'Kriminal' AI Platform Raises Cybercrime Concerns","no-filter-kriminal-ai-platform-raises-cybercrime-concerns-f8f419","The AI company officially forbids illicit use, while offering guardrail-free social engineering, offensive cybercrime, and OSINT scanning to anyone with a bit of cryptocurrency.","A new AI platform called 'Kriminal' is raising concerns within the cybersecurity community due to its readily available, yet officially forbidden, features for illicit use. Despite explicit prohibitions against illegal activities, the platform provides users with capabilities for social engineering, offensive cybercrime operations, and OSINT scanning, accessible with cryptocurrency payments.","Kriminal AI platform offers guardrail-free social engineering and OSINT scanning.","https:\u002F\u002Fwww.darkreading.com\u002Fapplication-security\u002Fno-filter-kriminal-ai-platform-cybercrime-concerns","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt85eae7cdd5f0ecc5\u002F6a86044bc3ca75985c01a97b\u002Fperson_in_handcuffs-AnnaStills-GettyImages-2229493276.jpg?width=720&quality=80&disable=upscale","2026-08-19T20:32:09+00:00","2026-08-19T22:00:10.9718+00:00",7,[17,20,23,25],{"name":18,"type":19},"Kriminal","product",{"name":21,"type":22},"AI","technology",{"name":24,"type":22},"social engineering",{"name":26,"type":22},"OSINT","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":27,"icon":29,"name":30,"slug":31},null,"Threat Intelligence","threat-intelligence",[33,38,43],{"category":34},{"id":35,"icon":29,"name":36,"slug":37},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":39},{"id":40,"icon":29,"name":41,"slug":42},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":44},{"id":45,"icon":29,"name":46,"slug":47},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",[],[18],{"controls":51,"vendors":80},[52],{"slug":42,"name":53,"problem":54,"products":55},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[56,64,72],{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",[],{"slug":82,"title":83,"body":84,"framework_refs":85,"framework_notes":95},"kriminal-ai-platform-lowers-barrier-to-entry-for-cybercrime","Kriminal AI Platform Lowers Barrier to Entry for Cybercrime","The emergence of the 'Kriminal' AI platform highlights a growing trend of unchecked AI services that openly offer capabilities for social engineering, OSINT reconnaissance, and offensive cyber operations despite nominal policy prohibitions. Cryptocurrency-based payment systems further enable anonymity, making it trivially easy for low-skilled threat actors to access dangerous capabilities. This matters because such platforms dramatically lower the technical barrier to entry for cybercrime, accelerating the volume and sophistication of attacks against organizations. The gap between stated platform policies and actual enforcement demonstrates how regulatory frameworks have yet to catch up with AI-enabled criminal tooling.",[86,87,88,89,90,91,92,93,94],"CIS Control 14 – Security Awareness and Skills Training","CIS Control 17 – Incident Response Management","NIST SP 800-53 AT-2 – Literacy Training and Awareness","NIST SP 800-53 SI-5 – Security Alerts and Advisories","NIST AI RMF – Govern 1.1 (AI Risk Policies)","EU AI Act – Article 5 (Prohibited AI Practices)","GDPR Article 32 – Security of Processing","MITRE ATT&CK – T1598 (Phishing for Information \u002F OSINT)","ITIL 4 – Service Configuration Management (monitoring third-party risk)",{}]