A model built from scratch, designed for offensive operations.
A new tool has emerged on the dark web — Xanthorox AI, a system calling itself the “killer of WormGPT and all EvilGPTs.” This development marks the next evolution in black-hat AI, aiming to automate attacks and bypass defenses with unprecedented efficiency.
Xanthorox was first spotted in late Q1 2025 and has since gained traction on dark web forums and private channels. Its creators market it as a fully modular platform for offensive cyber operations, focused on privacy, autonomy, and customization. Unlike other malicious AIs that rely on modified versions of existing models like GPT or LLaMA, Xanthorox is reportedly built from the ground up, running exclusively on local, self-hosted servers, without relying on cloud services or APIs.
Architecture-wise, Xanthorox combines five distinct models, each optimized for a specific task. Operating entirely offline on controlled infrastructure, it avoids surveillance, censorship, and data leaks. Key features include:
- Proprietary language models (not based on OpenAI, Meta, or Anthropic tech)
- Built-in image and voice processing
- Data gathering from over 50 search engines
- Full offline support and total isolation from third parties
Technically speaking, these features are feasible. Existing tools already allow local LLMs to process voice, vision, and gather web data without APIs. Even if Xanthorox isn’t as advanced as advertised, the concept is realistic, and tools like it are likely to proliferate.
In terms of capabilities, Xanthorox is positioned as a universal hacker assistant. It can write code, identify vulnerabilities, analyze data, and interact using voice and images. Its core component, Xanthorox Coder, automates script generation, malware creation, and exploit development. The Vision module analyzes uploaded images and screenshots to extract and describe content. The Reasoner Advanced module simulates human logical reasoning to assist in tasks that require coherent argumentation — though its accuracy may vary.
The system also supports voice control — both in real time and via pre-recorded messages — enabling hands-free operation in specific contexts. Integration with search engines provides uncensored, real-time information gathering, free from API limitations. Its built-in file analyzer can work with .c, .txt, .pdf, and other file types — extracting, modifying, and repackaging content, which is especially useful in data leak analysis.
Xanthorox isn’t just another attempt to bypass mainstream AI restrictions. It’s a step toward autonomous, resilient, and targeted systems that operate outside the oversight of major platforms. Even if some of its claims are exaggerated, the underlying concept is real — and its consequences may arrive much sooner than expected.
