据最先向Axios透露的一项研究显示，地下网络犯罪论坛上的黑客们正争相购买各类新型人工智能工具。
Hackers in underground cybercriminal forums are on shopping sprees for new AI tools according to research shared first with Axios.
为何此事值得关注：人工智能使得原本只有专业人士才能掌握的黑客技术变得价格更低且更易获取，这有可能让更多犯罪分子摇身一变成为极具威胁性的黑客。
Why it matters: AI is making once-specialized hacking capabilities cheaper and easier to buy, potentially transforming far more criminals into dangerous hackers.
数据说明一切：根据Halcyon勒索软件研究中心的报告，2025年末，地下论坛及平台上出现的人工智能工具数量还不到每月50款；而到了今年2月，这一数字已飙升至1400款以上。
By the numbers: s for AI tools on underground forums and platforms surged from fewer than 50 per month in late 2025 to more than 1,400 by February, according to a report from Halcyon's Ransomware Research Center.
- 研究显示，卖家出售ChatGPT Plus账号的价格低至10美分；而用于诱导人工智能模型绕过安全机制的“越狱提示词”售价仅为32美分。
• Sellers offered access to ChatGPT Plus accounts for as little as 10 cents and jailbreak prompts to trick models into breaking their safeguards for 32 cents, per the research.
- 去年10月至今年5月期间，Halcyon团队对77个Telegram频道、20个暗网论坛以及5个专门的地下交易市场上的近4000条帖子进行了分析。
• Halcyon studied nearly 4,000 posts across 77 Telegram channels, 20 dark web forums and five specialized underground markets between October and May. Threat level:
威胁程度：目前，众多企业正因这些地下市场上出现的工具所引发的网络攻击而蒙受数百万美元的损失。
Companies are already losing millions of dollars to the types of cyberattacks enabled by the tools found on these underground markets.
- Halcyon勒索软件研究中心负责人、前FBI网络部门副主管辛西娅·凯泽对Axios表示：“这些数据充分说明实施此类攻击的成本有多低……这对各企业而言绝对是个警示信号。”
• "It really goes to show you how cheap it is to conduct these activities ... which should be scary for organizations," Cynthia Kaiser, head of Halcyon's Ransomware Research Center and former deputy director of FBI Cyber, told Axios. The big picture:
整体形势：报告指出，网络犯罪分子已将这类工具的开发与销售彻底商业化，他们甚至借鉴了软件即服务订阅模式以及线上商店的运营方式。
Cybercriminals have completely commercialized the sale and creation of these tools, often modeling software-as-a-service subscription models and online storefronts, per the report.
- 如今，部分卖家通过Telegram上的简易线上商店，销售那些此前已在传统暗网论坛上经过测试并推广的人工智能工具。
• Some sellers are now offering AI tools they tested and promoted on traditional dark web forums through easier-to-manage storefronts hosted on Telegram.
- 凯泽说道：“这本不该让我感到意外。不过从中我们也能看出，多年来网络犯罪分子在商品销售与包装方面积累了丰富经验，而他们也迅速将这些经验应用到了人工智能工具的推广之中。”
• "It shouldn't have been shocking to me," Kaiser said. "But what we should take away from this is also how much cybercriminals have learned throughout the years about how to sell and package — and they applied this really quickly to the AI models."
具体来看：目前黑客们主要销售以下四类人工智能工具：
Zoom in: Hackers are selling four types of AI tools:
- 已越狱且遭盗用的AI服务：这些服务包含特定提示词，用户只需花费10美元左右就能移除主流AI模型的安全限制。
• Jailbroken and stolen AI services, including prompts that allow users to strip the safety guardrails from mainstream models for as little as $10.
- 身份欺诈与网络钓鱼工具：这些工具能让人轻松模仿真实人物的身份。
• Identity fraud and phishing tools that make impersonating real people quick and easy.
- 基于恶意数据训练而成的AI模型：这类模型可被用于协助实施网络犯罪，比如广为人知的WormGPT，它专门用于编写网络钓鱼邮件及恶意软件。
• Access to models trained on malicious data to aid cybercrime, such as the popular WormGPT that's designed to write phishing emails and malware.
- 借助AI技术增强的恶意软件与基础设施：例如某种诈骗系统，能够一次性呼叫多达120人参与诈骗活动。
• AI-augmented malware and infrastructure, including a system that can call as many as 120 people at once as part of a scam operation.
回顾： 2023年时，黑客能使用的工具寥寥无几且多为一次性使用的工具。如今，一个完善的黑市市场已然形成。
Flashback: In 2023, hackers could only tap a handful of one-off tools. Now, there's a robust marketplace.
- 凯泽指出，目前AI主要帮助犯罪分子以更低的成本、更高的效率完成现有攻击中的某些环节。
• Still, AI is largely helping criminals perform discrete elements of existing attacks more cheaply and efficiently, Kaiser said.
- “目前市面上尚未出现那种能独立完成所有攻击步骤且成功率极高的AI代理程序，”她说道。
• "What you're not seeing for sale is an agent that does it all for you and has this amazing success rate," she said.
Halcyon并未发现任何证据表明犯罪分子在售卖能够自主执行完整网络攻击流程的AI系统。
What to Halcyon didn't find evidence of criminals selling AI systems capable of running fully autonomous cyberattacks.
- 凯泽表示，即便是在那些借助AI技术开发的恶意软件与基础设施中，研究人员所观察到的也大多是代码辅助、基础设施搭建及其他单项任务，而非AI独立生成并部署恶意软件。
• Even in AI-enabled malware and infrastructure, Kaiser said, much of what researchers are seeing involves coding assistance, infrastructure and other individual tasks rather than AI creating and deploying malware on its own.