Nation state hackers use ChatGPT to improve cyberattacks
Nation state hackers use ChatGPT to improve cyberattacks
Occurred: 2023-2024
Report incident ๐ฅ | Improve page ๐ | Access database ๐ข
China, Iran, Russia and North Korea used ChatGPT to research, refine and mount offensive cyber operations across the world.ย
According to Microsoft research, Russian, North Korean, Iranian, and Chinese-backed groups have been discovered using tools including ChatGPT to conduct research into targets and to improve scripts and social engineering techniques for surveillance, disinformation and influence operations, and cybercrime campaigns.
The techniques employed were considered 'early-stage' and not 'particularly novel or unique, and 'significant attacks' using ChatGPT and other large language models were not discovered, Microsoft said.ย
In a blog post, OpenAI argued its GPT-4-powered chatbot offers 'only limited, incremental capabilities for malicious cybersecurity tasks beyond what is already achievable with publicly available, non-AI powered tools.'
However, experts believe that it is only a matter of time before effective malicious nation state-backed campaigns using chatbots and large language models are conducted.
Microsoft (2024). Staying ahead of threat actors in the age of AI
OpenAI (2024). Disrupting malicious uses of AI by state-affiliated threat actors
Operator: Aquatic Panda; Charcoal Typhoon; Crimson Sandstorm; Emerald Sleet; Fancy Bear; Forest Blizzard; Maverick Panda; Salmon Typhoon
Developer: OpenAI
Country: China; Iran; N Korea; Russia
Sector: Govt - defence
Purpose: Conduct research; Generate phishing content; Generate code
Technology: Chatbot; Generative AI; Machine learning
Issue: Mis/disinformation; Safety; Security
Page info
Type: Incident
Published: February 2024