All news
threat actor activity

Precursor Intelligence

WormGPT v5.2 Ultra: The Agentic AI Crime Ecosystem That Runs 50K+ Hackers

ThreatMon's Aug 7 analysis confirms WormGPT has evolved into a six-model agentic AI suite with 50K+ active engineers, deep reasoning core, and zero content filters.

29 August 2026
WormGPTagentic-AIcybercrimeGPT-JBEC-phishing
WormGPT v5.2 Ultra: The Agentic AI Crime Ecosystem That Runs 50K+ Hackers

At a glance

Malware & tooling

WormGPT

WormGPT v5.2 Ultra: The agentic AI crime engine

WormGPT has shipped v5.2 Ultra, the flagship model in its six-model suite, built around a deep reasoning core with zero content filters. The new release sits alongside v5.1 Uncensored, Coder v5.1, v5.0 Ultra, v4.1, and v4 Classic, giving users a full stack from ultra-low latency streaming to the main event.

The platform now claims 50,000+ active engineers, 99.9% uptime, and 100% uncensored output across the board. Pricing starts at $50/month for the 1-month plan, which includes unlimited generations, unrestricted v5.2 Ultra access, live web search, file analysis, and four daily workspace uploads. The $260 lifetime VIP tier adds faster responses, unlimited file uploads, agent mode, VSCode integration, and full source code access. Payments go through USDT or 100+ tokens via automated crypto checkout, with manual Telegram orders as a fallback.

How the agentic AI works

WormGPT is built on GPT-J, the open-source LLM from 2021, and trained specifically on malware-heavy data. The v5.2 Ultra flagship adds a deep reasoning core that handles thinking, JSON mode, and multi-turn logic in a single pass.

The $50/month tier gives you unlimited generations, unrestricted v5.2 Ultra access, live web search, file analysis, and four daily workspace uploads. The $260 lifetime VIP tier adds Agent Mode, VSCode integration, and full source code access on top of faster responses and unlimited file uploads.

The BEC test that made it famous

SlashNext researcher Daniel Kelley put WormGPT to the test that made it famous: a prompt asking the model to write a business email compromise (BEC) email designed to pressure an unsuspecting account manager into paying a fraudulent invoice.

The output was, in Kelley’s words, “remarkably persuasive” and “strategically cunning.” The generated email used professional language, included a wire-transfer request, and came back with zero spelling or grammar errors — the kind of typos that usually give away a phishing email. No content filter, no refusal, no I'm an AI and can't do that.

Beyond BEC, WormGPT can write Python malware, craft jailbreak payloads, and handle smishing and blackmail prompts. It’s the same model that answers the requests ChatGPT would refuse — no guardrails, no topic blocks, no artificial content filtering. Ask it to generate a reverse shell or a ransom note and it just does it.

The full model lineup

The six-model lineup spans from a lightweight baseline to the deep-reasoning flagship. v5.2 Ultra is the main event: a deep reasoning core with zero content filters, handling thinking, JSON mode, and multi-turn logic in a single pass. It’s the model you point at a pentest or a full-stack app and expect raw output.

v5.1 Uncensored is the workhorse for complex multi-turn logic and JSON mode, with function calling for tool execution. Coder v5.1 is the specialized code model: AST parsing, refactoring, vulnerability scanning, and full-stack debugging. v5.0 Ultra is the high-throughput streamer at 78 tok/s, built for real-time streaming, high-volume calls, and agent loops.

v4.1 is the unfiltered creative model with custom persona control and long-form writing. v4 Classic is the lightweight baseline for quick text extraction and batch requests. All six ship on every plan, so the $50/month tier gets the full stack from v4 Classic up to v5.2 Ultra.

Key points

  • WormGPT v5.2 Ultra is the flagship model with a deep reasoning core and zero content filters, built on GPT-J (2021) and trained on malware-heavy data.
  • The platform now ships six models: v5.2 Ultra (flagship), v5.1 Uncensored, Coder v5.1, v5.0 Ultra (78 tok/s), v4.1, and v4 Classic.
  • 50K+ active engineers are running it globally with 99.9% uptime; plans range from $50/month to $260 lifetime VIP with full source code access.
  • WormGPT handles BEC/phishing, malware generation, jailbreaks, and smishing — no ethical guardrails, no topic blocks, no artificial content filtering.
  • ThreatMon's Aug 7, 2026 analysis confirms the full agentic AI crime ecosystem, including agent mode, VSCode integration, and live web search with file analysis.

Further reading & sources