Campaigns pushing bogus ChatGPT software are duping people all over the world.
Cybersecurity website experts have cautioned that hackers are attempting to use the huge popularity of ChatGPT to spread malware.
An intricate plan involving hijacked Facebook profiles, groups, and pages, malicious Facebook advertising, and phony ChatGPT software has been outlined in a report by cybercrime experts’ security service website.
According to the study, threat actors are distributing malware through hijacked Facebook profiles. Moreover, they would enter into these identities and use them to distribute malicious advertisements. The advertisements would promote a website where the “latest version” of ChatGPT could be obtained for free.
Fake websites and Facebook communities
ChatGPT, for those who are unfamiliar, is a language-based artificial intelligence model. It is a chatbot whose innovative technology has taken the world by surprise. The utility is mostly free. Furthermore, there is no executable to obtain, and anyone promoting one is a malevolent individual.
Moreover, victims who fall for the lure and download the software risk having their personally identifiable information and financial information compromised. According to online security website experts, the malware can propagate across systems via removable media. Furthermore, it can increase rights in order to stay on the infected targets.
In addition, when they are not posting malicious advertisements, the attackers use compromised Facebook identities to manage various sites and groups. Admin accounts are extremely valuable on the dark web as they naturally and enormously expand the reach of malware campaigns. Also, the researchers found 13 Facebook pages/accounts with over 500,000 fans for this effort. The eldest page, which has over 23,000 followers, was taken in mid-February of this year.
Cybercriminals are capitalizing on the popularity of ChatGPT by compromising legitimate Facebook accounts and distributing malware via Facebook ads, putting users’ security at risk. Moreover, there were 13 compromised accounts with over 500K followers, some of which were stolen as recently as February 2023. It is also important for users to be vigilant and aware of such malicious activities on the platform.
The assailants appear to be sharing a video through these pages and groups to draw and involve the audience. In addition, there were at least 25 websites imitating OpenAI’s chatbot. It was determined that Vietnamese actors were responsible for the majority of the compromised accounts.
Looking for vulnerability assessment services visit now!
