Breaking

Criminal AI Tool Ads Surged Above 1,400 a Month, Halcyon Finds

October 6, 2026 at 13:57 EDT

Security
AI Agents
Foundation Models

Underground markets for criminal AI tools have moved from scattered experiments to a functioning retail economy, according to new research from Halcyon. The firm found that monthly advertisements for AI-enabled cybercrime tools rose from fewer than 50 in late 2025 to more than 1,400 by February 2026, a jump of more than 28-fold.

Oct. 6, 2026 · Criminal AI market

Criminal AI tools go retail

Advertisements for underground AI cybercrime tools jumped from fewer than 50 per month in late 2025 to more than 1,400 by February 2026. The shift is from isolated tools to a commercial market with pricing, bots and subscriptions.

More than 28x growth in monthly ads

Each block represents roughly one 50-ad unit; the February column exceeds 28 units.

<50

Late 2025 monthly ads

>1,400

February 2026 monthly ads

~4,000

posts analyzed

channels

dark web forums

specialized markets

How the market works

Forum threads

Tools are tested, copied and priced.

Bot storefronts

Always-on sellers distribute offers.

Buyers

Low-skill actors gain phishing, fraud and code support.

Credentials resold

Some criminals are compromised by other criminals.

Operational concern

Phishing, vishing, forged documents and early malware work are becoming cheaper and easier for less skilled operators.

Current ceiling

No evidence was found of fully autonomous cyberattack systems being sold, and many jailbreak claims can become obsolete or turn out to be scams.

Continue reading

The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.