Skip to Content
logologo
AI Incident Database
Donate
Discover
Submit
  • Welcome to the AIID
  • Table View
  • List view
  • Entities
  • Taxonomies
  • Spatial View
  • Blog
  • AI News Digest
  • Random Incident
  • Sign Up
Discover
Submit
  • Welcome to the AIID
  • Table View
  • List view
  • Entities
  • Taxonomies
  • Spatial View
  • Blog
  • AI News Digest
  • Random Incident
  • Sign Up
Entities

Victims of automated cybercrime

Incidents Harmed By

Incident 10153 Report
Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

2025-04-07

Xanthorox AI is a malicious, modular AI system released on darknet forums in early 2025. Designed from scratch for offensive cyber operations, it runs on private infrastructure and includes models for code generation, phishing, malware, social engineering, and real-time voice/image input. Its release represents a deliberate deployment of an autonomous attack platform.

More

Incident 15861 Report
Threat Actor Reportedly Used AI-Assisted Workflows to Compromise AWS Environment for Extortion

2026-07-08

Sygnia reported that a threat actor apparently used purportedly AI-assisted or agentic workflows to move rapidly through an unidentified organization's AWS environment during an approximately 72-hour intrusion. The attacker allegedly expanded from an Internet-facing application into cloud infrastructure and data stores, reportedly stealing credentials and sensitive information while demonstrating the ability to disrupt services as leverage for extortion. Sygnia did not identify a specific model.

More

Related Entities
Other entities that are related to the same incident. For example, if the developer of an incident is this entity but the deployer is another entity, they are marked as related entities.
 

Entity

Malicious actors

Incidents involved as Deployer
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

More
Entity

Darknet forum users

Incidents involved as Deployer
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

More
Entity

Cybercriminals

Incidents involved as Deployer
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

  • Incident 1586
    1 Report

    Threat Actor Reportedly Used AI-Assisted Workflows to Compromise AWS Environment for Extortion

More
Entity

Xanthorox AI creators

Incidents involved as Developer
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

More
Entity

Unknown black-hat AI developers

Incidents involved as Developer
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

More
Entity

Victims of phishing attacks

Incidents Harmed By
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

More
Entity

Victims of malware attacks

Incidents Harmed By
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

More
Entity

General public

Incidents Harmed By
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

More
Entity

Enterprise IT systems

Incidents Harmed By
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

  • Incident 1586
    1 Report

    Threat Actor Reportedly Used AI-Assisted Workflows to Compromise AWS Environment for Extortion

More
Entity

Critical infrastructure systems

Incidents Harmed By
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

More
Entity

Xanthorox Vision

Incidents implicated systems
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

More
Entity

Xanthorox Reasoner Advanced

Incidents implicated systems
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

More
Entity

Xanthorox Coder

Incidents implicated systems
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

More
Entity

Xanthorox AI

Incidents implicated systems
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

More
Entity

Voice and image handling modules

Incidents implicated systems
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

More
Entity

Live web scraping module

Incidents implicated systems
  • Incident 1015
    3 Reports

    Reported Darknet Launch of Xanthorox AI Introduces Autonomous Cyberattack Platform

More
Entity

Extortionists

Incidents involved as Deployer
  • Incident 1586
    1 Report

    Threat Actor Reportedly Used AI-Assisted Workflows to Compromise AWS Environment for Extortion

More
Entity

Agentic threat actors

Incidents involved as Deployer
  • Incident 1586
    1 Report

    Threat Actor Reportedly Used AI-Assisted Workflows to Compromise AWS Environment for Extortion

More
Entity

Large language model developers

Incidents involved as Developer
  • Incident 1586
    1 Report

    Threat Actor Reportedly Used AI-Assisted Workflows to Compromise AWS Environment for Extortion

More
Entity

AI agent system developers

Incidents involved as Developer
  • Incident 1586
    1 Report

    Threat Actor Reportedly Used AI-Assisted Workflows to Compromise AWS Environment for Extortion

More
Entity

Privacy

Incidents Harmed By
  • Incident 1586
    1 Report

    Threat Actor Reportedly Used AI-Assisted Workflows to Compromise AWS Environment for Extortion

More
Entity

Amazon Web Services (AWS) customers

Incidents Harmed By
  • Incident 1586
    1 Report

    Threat Actor Reportedly Used AI-Assisted Workflows to Compromise AWS Environment for Extortion

More
Entity

Large language models

Incidents implicated systems
  • Incident 1586
    1 Report

    Threat Actor Reportedly Used AI-Assisted Workflows to Compromise AWS Environment for Extortion

More
Entity

Amazon Web Services (AWS) cloud infrastructure

Incidents implicated systems
  • Incident 1586
    1 Report

    Threat Actor Reportedly Used AI-Assisted Workflows to Compromise AWS Environment for Extortion

More
Entity

Amazon Web Services (AWS)

Incidents implicated systems
  • Incident 1586
    1 Report

    Threat Actor Reportedly Used AI-Assisted Workflows to Compromise AWS Environment for Extortion

More
Entity

AI agent systems

Incidents implicated systems
  • Incident 1586
    1 Report

    Threat Actor Reportedly Used AI-Assisted Workflows to Compromise AWS Environment for Extortion

More

Research

  • Defining an “AI Incident”
  • Defining an “AI Incident Response”
  • Database Roadmap
  • Related Work
  • Download Complete Database

Project and Community

  • About
  • Contact and Follow
  • Apps and Summaries
  • Editor’s Guide

Incidents

  • All Incidents in List Form
  • Flagged Incidents
  • Submission Queue
  • Classifications View
  • Taxonomies

2026 - AI Incident Database

  • Terms of use
  • Privacy Policy
  • 3e68a9f