Malware uses ChatGPT hype to steal login credentials
Kaspersky experts have detected a malware campaign that takes advantage of the hype surrounding the AI chatbot ChatGPT. Cybercriminals rely on a Trojan to create accounts in Facebook groups that look confusingly similar to the official OpenAI accounts.
Since OpenAI made its AI tool "ChatGPT" available to a broad public, users from all over the world have pounced on the now famous chatbot to find out what the interesting tool is already capable of. ChatGPT can virtually conduct dialogues as if a human were sitting on the other end of "the line." The use of the AI application is becoming a bit "mainstream" lately, as users are talking to the chatbot not just for fun. For example, ChatGPT can also help populate web page content or suggest a job application letter as an example.
Example of a typical social engineering attack
Now warns Kaspersky against a scam by cybercriminals who are already creating fake groups on Facebook that look confusingly similar to the official OpenAI account. The fraudulent groups sometimes host official posts with news about the service and advertise a program that poses as a desktop client for ChatGPT. Anyone who clicks on such a fraudulent link is redirected to a fake website that looks and feels like the official ChatGPT site. During the supposed installation of the alleged ChatGPT client, the installation terminates with an error message, during which a Trojan is installed in the background. The Trojan-PSW.Win64.Fobo program targets information about stored accounts from various browsers. This includes, for example, cookies and login information from Facebook, Google and Tiktok accounts.
According to Kaspersky, many cases with the Trojan have already been reported in Africa, Asia, Europe and America. As always, it is advisable to always check the URL as well as the file names of any installation file carefully.
Source: Kaspersky
