The Fifth Wave of Cybercrime
Global Warning of an Unprecedented Escalation in Cyber Threats
Cybercrime has entered a new and more dangerous phase with the accelerating adoption of artificial intelligence technologies, in what Group-IB has described as the "Fifth Wave" of digital crime — a phase characterized by turning complex attacks that once required advanced technical expertise into ready-made, on-demand services that anyone can use for a simple monthly subscription.
This shift does not represent merely a technical evolution, but a structural transformation in the very nature of crime itself, where attacks have become faster, broader in scope, and more capable of adaptation and concealment, according to the company's first research paper titled:
"Weaponized AI: A Look Inside the Criminal Ecosystem Fueling the Fifth Wave of Cybercrime".
From Manual Phishing to Autonomous AI: The Evolution of Five Criminal Waves — The Fifth Wave of Cybercrime
Group-IB indicates that cybercrime has passed through five major waves over the past three decades:
-
The First Wave (Late 1990s)
Manual phishing attacks relying on email and simple messages. -
The Second Wave (Mid-2000s)
Proliferation of malware, viruses, and individual hacking tools. -
The Third Wave (2010 – 2015)
The emergence of organized cybercrime and ransomware-as-a-service. -
The Fourth Wave (2016 – 2022)
Supply chain attacks and large-scale data breaches. -
The Fifth Wave (Since 2023)
Deep integration of AI into the criminal infrastructure, encompassing automation, personalization, and advanced identity impersonation.
The company believes this latest wave is the most dangerous yet, not only because of new tools, but because of the lowering of the technical barrier to crime.
The Dark Web Reveals the Scale of the Shift
Based on extensive analysis of dark web forums and marketplaces, Group-IB recorded:
-
A 371% increase in AI-related posts since 2019.
-
A rise in replies and interactions of 1199%.
-
A total of 23,621 original posts and 298,231 replies recorded during 2025 alone.
This intense activity coincided with the widespread proliferation of large language models since late 2022, particularly following the launch of GPT-4, which prompted criminals to shift from experimentation to systematic and organized use.
Cybercrime in a Software-as-a-Service Model
One of the most dangerous shifts documented by Group-IB is the adoption by criminals of the Cybercrime-as-a-Service model, where:
-
Criminal tools are sold via monthly subscriptions.
-
Different packages are available according to "tier".
-
Technical support and regular updates are provided.
-
Tools are marketed to beginners before professionals.
This model has made the execution of complex phishing attacks, institutional identity impersonation, or even malware development accessible without advanced technical knowledge.
Dark Language Models: AI Without Limits
Group-IB points to the emergence of what are known as Dark LLMs, which are language models:
-
Developed specifically for criminal purposes.
-
Free of any ethical constraints.
-
Sold via subscriptions ranging between $30 and $200 per month.
-
Used by thousands of criminals around the world.
These models are exploited for:
-
Writing highly convincing phishing messages.
-
Impersonating real individuals.
-
Generating customized hacking instructions.
-
Bypassing traditional security systems.
Jailbreaking and Deepfakes: A Dual Threat
Bypassing Protections of Legitimate Models
Alongside dark models, Jailbreak tools have proliferated, aimed at:
-
Forcing legitimate models to produce prohibited content.
-
Bypassing built-in security systems.
-
Reusing ready-made "jailbreak templates".
By the third quarter of 2025, the volume of this activity equaled the total recorded throughout all of 2024.
Deepfake-as-a-Service
Group-IB monitors an active market for:
-
Voice cloning in under 10 seconds.
-
Creating realistic fake videos.
-
Bypassing KYC and biometric recognition systems.
The year 2024 saw this market grow by 233%, followed by an additional growth of 52% in 2025.
Cybercrime Transforms into a Global Industry
International experts, including former Interpol officials, confirm that AI:
-
Has not created new criminal motivations.
-
But has multiplied speed, scope, and complexity.
-
And made crime more difficult to detect and attribute.
Attackers are now able to carry out large-scale operations with a limited digital footprint, placing defenders before an unprecedented challenge.
How Should Defenders Respond?
Group-IB recommends shifting from traditional defense to:
-
Intelligence-driven security.
-
Monitoring adversary behavior rather than relying solely on attack signatures.
-
Integrating AI into detection and response.
-
Strengthening international cooperation between the private sector and law enforcement agencies.
The company believes that cross-border cooperation is no longer an option, but an imperative necessity to confront this generation of threats.
Conclusion: A New Dawn for Crime… and an Immediately Required Response
The "Fifth Wave" represents a historic turning point in cybercrime, where artificial intelligence has become the primary fuel for a global criminal ecosystem evolving at a speed that outpaces traditional defensive models.
Absorbing this shift, investing in threat intelligence, and building effective international partnerships has become a fundamental prerequisite for maintaining digital security in an AI-led world. Artificial intelligence. This content comes as part of following Arabic websites and specialized blogs, alongside what Egypt stores and Kuwait stores and vitamin stores provide, relying on Mashhor for social media services as a primary source of information and updates.
And here, dear brothers and sisters, we have successfully completed the mission ✌
Send blessings upon the Prophet, and your hearts will be at peace — do good no matter how small 🎯🌷
And do not forget our brothers everywhere in your prayers 📌
Accept the greetings of the #Ezznology #Ezz_Tech
You can also browse our store's products from here 👈#our store 🌷or here
To join our family on the Telegram group click 👈here
And also the Facebook group where we share information and help members from 👈here
Other topics that may interest you:
What is a Denial of Service Attack or Brute Force Attack DDoS attack
SIRBAI Unveils a Smart Platform for Managing Autonomous Drone Swarms
Uptime Institute Report Reveals 5 Critical Predictions for Data Centers in 2026
Machines Can Think Summit 2026 in Abu Dhabi
Reasons for the Failure of Online Stores in Egypt
How to Protect Your Accounts from Hacking?
