No new product can be called a success online until the scammers show up.
ChatGPT exploded in just a few months to become the fastest growing app of all time.
Therefore, of course, hackers are already using the popularity of OpenAI artificial intelligence chatbot to scam people.
Cybersecurity researchers have already discovered hundreds of them registered(Opens in a new tab) Domains with the term “ChatGPT”. While not all of these domains are armed for nefarious purposes, some of them are already being used in this way.
The tweet may have been deleted
(opens in a new tab)
(Opens in a new tab)
Cybersecurity researcher Dominic Alvieri shared his findings on social media about fake ChatGPT websites he came across that try to spread malware and steal victims’ private information.
According to Alvieri and as first reported by Bleeping Computer (Opens in a new tab), such a page is “chat-gpt-pc.online”. tried(Opens in a new tab) to persuade visitors to its site that ChatGPT is offered as a downloadable local application for Windows. Alvieri discovered that this download would inject users with the RedLine information-stealing malware. Essentially, this malware steals information stored in user applications such as their web browser. For example, if a user asks Google Chrome to save their passwords or credit card information, this malware can extract the data and send it to the hacker.
The tweet may have been deleted
(opens in a new tab)
(Opens in a new tab)
Alvieri not only targets Windows users, but also Alvieri Found(Opens in a new tab) fake ChatGPT apps on Google Play Store. Upon download, these apps would deploy similar phishing campaigns to steal user information.
The tweet may have been deleted
(opens in a new tab)
(Opens in a new tab)
A new report(Opens in a new tab) by cybersecurity firm Cyble has found out how widespread this is, uncovering more than 50 fake ChatGPT apps. And the Cyble report also found interesting ways for hackers to steal from their victims. A download installed a program called “chatGPT1”. It does not provide any AI utility but secretly subscribes its target to many paid services in so-called SMS billing scam.
Those who wish to use ChatGPT without being scammed should go directly to OpenAI’s website at the URL https://chat.openai.com (Opens in a new tab) or the recently acquired domain AI.com (Opens in a new tab) go.
As ChatGPT continues to grow its user base, and especially after unveiling a paid feature through its $20 per month subscription plan, users should watch out for malicious actors trying to steal their information and exploit the AI trend.