Over 100,000 compromised accounts of the OpenAI language model ChatGPT were found on an illegal dark web marketplace.
The discovery comes from Singapore-based cybersecurity firm Group-IB, which describes the discovery in a blog post published today.
“Many companies are integrating ChatGPT into their work flows. Employees are typing sensitive communications or using bots to optimize their own code,” said Group-IB’s head of threat intelligence. , Dmitry Shestakov commented.
According to this security expert, if an attacker manages to obtain account credentials, ChatGPT’s standard configuration preserves all conversations, unintentionally providing a wealth of sensitive information to the attacker. There is a possibility.
“At Group-IB, we continuously monitor underground communities to quickly identify such accounts,” Shestakov added.
According to the company’s threat intelligence platform, the compromised credentials were found in the logs of the information-stealing malware Raccoon and traded on underground platforms over the past year.
Read more about Raccoon malware: Information thieves spread via AI-generated YouTube videos
Group-IB wrote that the number of available logs containing compromised ChatGPT accounts peaked at 26,802 in May 2023.
Asia Pacific had the highest concentration of credentials for sale, accounting for 40.5% of ChatGPT accounts stolen between June 2022 and May 2023.
To reduce the risks associated with compromised ChatGPT accounts, Group-IB recommended users update their passwords regularly and enable two-factor authentication (2FA) for added security .
The company also emphasized the importance of threat intelligence to protect against such attacks.
“Using real-time threat intelligence, businesses can better understand the threat landscape, proactively protect assets, and make informed decisions to strengthen their overall cybersecurity posture. We can,” they explained.
In the latest Group-IB report, Vulcan Cyber’s Voyager18 research team uncovers a new cyber-attack technique that relies on ChatGPT that allows attackers to spread malicious packages into developers’ environments. It was announced a few weeks later.
Editorial image credit: Diego Thomazini / Shutterstock.com
