A dual-use platform is a system built for legitimate activity that can also be repurposed for abuse. In cyber security, that usually means a service or tool with normal features such as messaging, file sharing, identity management, live streaming, or automation, but with enough openness that an attacker can turn the same features into a delivery channel, coordination space, or data source.
These platforms matter because defenders cannot assume that “ordinary” use is safe by default. Attackers may abuse game chats, social features, cloud collaboration tools, developer services, or ad systems for phishing, grooming, recruitment, influence, command-and-control, or reconnaissance. On the defensive side, the same dual-use view helps teams design safer defaults: tighter permissions, stronger moderation, better logging, abuse detection, and controls for minors or high-risk users. The key test is not whether a platform is malicious, but whether its legitimate functions can be redirected toward harmful goals.