42
50
Luciferus Uncensored AI Service Lets Cybercriminals Generate RAT Malware
Sophos reports cybercriminals are selling Luciferus, an uncensored subscription AI service claiming a 120-billion-parameter model that generates RAT code without safeguards.
Sophos Counter Threat Unit observed a user named Optimus_Prime advertising the Luciferus uncensored AI service on August 24, claiming a proprietary 120-billion-parameter model offering unrestricted coding assistance, with tiers priced at $35, $55, and $75. The public website shows different pricing ($22 to $47.14), and Sophos speculates with low confidence the service may be based on Alibaba's Qwen rather than a truly proprietary model. Researchers documented the Junior tier generating a basic Python RAT with network communication and command-execution functionality, though the code was not tested. The service follows the commercialization trend of WormGPT and FraudGPT in cybercriminal ecosystems.
40
30
Hackers Advertise Uncensored Luciferus AI Service on Underground Forums
Sophos CTU found Luciferus, an uncensored criminal AI subscription service on the Exploit forum that returned RAT source code on request.
Sophos Counter Threat Unit discovered Luciferus advertised on August 24, 2026 on the Exploit forum by persona 'Optimus_Prime', claiming a proprietary 120-billion-parameter uncensored model that analysts assess with low confidence may be built on Alibaba's Qwen. Subscriptions run $35-$75 monthly, with a VIP 'Individual Embodiment' tier offering a separately deployed model trained on customer data. In testing, the Junior model generated Python remote-access-trojan source code, though Sophos did not execute or verify it. The service extends the WormGPT/FraudGPT lineage into structured commercialization with tiered pricing resembling mature SaaS businesses.
52
Uncensored AI sold on hacking forum as alternative to ChatGPT and Claude jailbreaks
Sophos found Luciferus, an uncensored AI subscription service likely built on Qwen, sold on the Exploit forum and capable of generating working malware code.
Sophos Counter Threat Unit found an ad for 'Luciferus' posted August 24 on the Exploit forum by a persona named 'Optimus_Prime', claiming a proprietary 120-billion-parameter model that answers requests without ethical restrictions. Sophos assesses with low confidence it is based on Alibaba's open-source Qwen family. Forum tiers cost $35-$75/month, while the website lists Junior/Middle/Pro tiers at $22-$47.14; a test prompt on the Junior tier returned Python remote access trojan source code. Sophos warns such services lower barriers for less skilled cybercriminals and outlast jailbroken mainstream LLMs.
55
DeepSeek v4.1 Flash Uncensored
Hugging Face user dealignai published an uncensored FP8-quantized variant of DeepSeek v4.1 Flash, drawing moderate Hacker News attention.
A community-published uncensored FP8 quantization of DeepSeek v4.1 Flash appeared on Hugging Face under user dealignai. The release is a third-party upload rather than an official DeepSeek launch, and no benchmark data or license details are provided in the listing. It received limited visibility, with 43 points and 11 comments on Hacker News.
30
42
60
57
DavidAU/Qwen3.8-27B-TURBO-Fable-Cold-Fusion-735-882-Heretic-Uncensored-NEO-CODER-MAX-MTP-GGUF — new model trending #8 on Hugging Face
A new Qwen3.8-27B GGUF fine-tune claims ARC-C 735 at 8-bit with thinking tokens cut 2x-10x versus the base model.
Independent creator DavidAU released a GGUF fine-tune of Qwen3.8-27B built with Unsloth, claiming ARC-C of 735 at 8-bit and 719 at 4-bit, trending #8 on Hugging Face. The 'TURBO' variant cuts thinking tokens by one half to as much as one tenth while retaining output quality and detail. The repo ships both regular and MTP quants and claims gains over the base model across seven benchmarks, using 'Cold Fusion (GAIN + Unsloth)' and 'Fable Fusion 711' training methods.
42
45
45
42
42
60
30
55
Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours
Google's GTIG reports threat actors using autonomous AI agents, credential stealers, and LLMs to steal AI models, API credentials, and harvest thousands of credentials.
Google Threat Intelligence Group says attackers are targeting proprietary AI models across healthcare, government, and media, exfiltrating API credentials, and co-opting victim cloud environments to run unauthorized AI workloads. TeamPCP (Altered Spider/UNC6780) is conducting supply chain compromises of PyPI, npm, and Docker Hub, deploying the SANDCLOCK and DUSTMAKER credential stealers, with DUSTMAKER using AI workspace poisoning and prompt injection for defense evasion. One financially motivated actor used an autonomous multi-agent framework to compromise thousands of third-party credentials in under six hours without human intervention. China-nexus groups UNC6508 and Basin Castle (Mustang Panda) used local open-weight LLMs and commercial LLMs like Gemini, Claude, and Codex for espionage tasks and evading provider monitoring.
72
dealignai/GLM-5.3-CYBERSECURITY-FP8 — new model trending #13 on Hugging Face
dealignai releases GLM-5.3-CYBERSECURITY-FP8, a 753B MoE weight-modified variant cutting refusals on offensive-security prompts, trending #13.
dealignai released GLM-5.3-CYBERSECURITY-FP8 on Hugging Face, a cybersecurity-domain 'crack' of the 753B-parameter GLM-5.3 MoE model, currently trending #13. The release directly edits bf16 residual writers, keeps FP8 routed experts, and serves with stock vLLM on 8x H200 GPUs with 131k context. HarmBench-320 evaluations show 80-84% direct harm compliance and 89% cyber-offense compliance, while MMLU rose 1.07 points to 86.65%. Copyright-verbatim reproduction remains a known soft-refusal limitation, with an UNCENSORED sibling variant offered.
30
[AINews] OpenAI shuts off Cursor
OpenAI cut off API access to coding tool Cursor after its SpaceX acquisition, citing contract violations by Elon Musk's companies.
OpenAI disabled Cursor's access following the closing of Cursor's acquisition by SpaceX, citing its experience with Elon Musk's companies violating contracts; Cursor responded that OpenAI accounts for only 5% of its traffic. The weekly digest also covers major open-weight releases: Z.ai's GLM-5.3 (744B total/40B active, 1M context) and Tencent's Hy4-preview (770B/49B, ~#5 on Code Arena WebDev), plus Alibaba's Qwen3.8-Flash (125B/6B). vLLM published benchmarks showing no universal winner among speculative decoding methods across model families.
55
30
30
47
30
30
42
Abliteration.ai is making a business out of removing AI guardrails
Startup Abliteration.ai commercially hosts guardrail-free open-weight models like Z.ai's GLM-5.3, raising misuse concerns for offensive cyber and bio tasks.
Abliteration.ai offers hosted versions of open-weight models with refusal behavior stripped via the abliteration technique, including Z.ai's newly released GLM-5.3, accessible free through a browser or API. The startup says its goal is enabling offensive cyber, red-teaming, and agent testing work that guarded models refuse to do. Safety researchers such as CivAI's Andrew Yoon warn that easily deployed unguarded models could be used for harm, and experts suggest government interventions like classifier requirements or GPU access verification. The revenue-funded startup serves red-teaming firms working with banks and critical-infrastructure organizations and has no KYC beyond credit card logging.
45
30
55
30
30
60
47
55
42
45
55
ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More Stories
60
60