Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

ChatGPT-Themed Scam Attacks Are on the Rise

Summary: Unit 42 observed a 910% increase in monthly registrations of ChatGPT-related domains between November 2022 and early April 2023, alongside 17,818% growth in related squatting domains from DNS Security logs and up to 118 daily detections of ChatGPT-related malicious URLs. Researchers documented fake ChatGPT sites delivering Trojan malware, pages collecting credit card and email details, a crypto giveaway abusing the OpenAI logo and Elon Musk's name, and a copycat Chrome extension that calls the Facebook Graph API to steal account details.

Why it matters: More than 300 ChatGPT-related domains were registered shortly after Microsoft announced its new Bing on Feb. 7, 2023, and most of the squatting domains seen by early April 2023 were not controlled by OpenAI and could be weaponized at any time. A single fake 'DOWNLOAD FOR WINDOWS' button or a lookalike extension is enough to hand an attacker a device or an account, and the brand carrying that risk is the one your users trust most.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related