How attackers actually use LLMs: in their own words

In September 2026, a member of the Russian-language Exploit forum published a write-up describing how he uses mainstream AI assistants in everyday phishing and credential-theft operations, according to Lunar Cyber. The post addresses defenders' question of whether criminals have genuinely turned AI assistants into attack tools or whether the threat is mostly marketing.

The question, answered in the Exploit forum Defenders keep asking a simple question: have criminals really turned mainstream AI assistants into attack tools, or is this mostly marketing? In September 2026 a member of the Russian-language forum Exploit answered it himself. He published a write-up of how AI fits into his everyday phishing and credential … The post How attackers actually use LLMs: in their own words https://lunarcyber.com/blog/how-attackers-actually-use-llms-in-their-own-words/ appeared first on Lunar Cyber https://lunarcyber.com .