>
ChatGPT continues to make headlines – but this time for all the wrong reasons, experts have warned.
Cybersecurity researchers from Check Point Research (CPR) have observed the tool being used by cybercriminals to improve – and sometimes build from scratch – dangerous malware (opens in new tab) and ransomware.
The team has released the results of their investigation, saying they have seen numerous posts on underground hacking forums where cybercriminals are discussing how to create infostealers, encryption tools and other malware – using ChatGPT. To make matters worse, some authors appear to be complete newcomers to the world of programming, indicating that the tool can be used to dramatically lower the barrier to entry into cybercrime.
In addition to building malware and ransomware, cybercriminals also use the AI-powered chatbot to build supporting software. One hacker described using the tool to create a marketplace, where other hackers can trade illegal and stolen goods, such as payment details, malicious software, as well as drugs and firearms. All payments on the platform would be made in cryptocurrencies.
“Cybercriminals find ChatGPT attractive. In recent weeks, we have seen evidence that hackers are starting to use it to write malicious code,” said Sergey Shykevich, Threat Intelligence Group Manager at Check Point.
“ChatGPT has the potential to speed up the process for hackers by giving them a good starting point. Just as ChatGPT can be used properly to help developers write code, it can also be used for malicious purposes. While the tools we analyze in this report are pretty basic, it’s only a matter of time before more sophisticated threat actors improve the way they use AI-based tools. CPR will continue to investigate ChatGPT-related cybercrime in the coming weeks.”
ChatGPT is an AI powered chatbot recently published by OpenAI. Since the tool’s release, its quality has attracted a lot of attention, but also aroused some fear. The media even goes so far as to discuss whether tools like ChatGPT could spell the end of Google and other mainstream tech giants, or if it could put the majority of software developers out of work.