ChatGPT became extremely popular as soon as it first launched on November 30, 2022. However, its popularity has led scammers to try to take advantage of gullible users by launched fake AI ChatGPT chatbots. In fact, ChatGPT has provided a tremendous opportunity for fraudsters to launch malware attacks, and it has now reached dangerous proportions. Over the past few months, a number of applications and software masquerading as the ChatGPT engine have been deployed. In the latest developments, according to Researchers At Palo Alto Networks’ Unit 42, a new wave of malware variants emerged concurrently with OpenAI’s release of GPT-3.5 and later GPT-4. These malware variants specifically target users interested in using the ChatGPT engine.
Further investigation by the researchers identified two different types of active malware. The first application masquerades as a “SuperGPT” application but in reality it is the Meterpreter Trojan. It is a GPT-4 powered AI assistant that can perform tasks like writing emails, answering questions, and writing articles. Moreover, it is also equipped with speech recognition and language translation.
The second variant acts as a “ChatGPT” app, but instead sends messages to high-fee numbers in Thailand. If successfully exploited, the malicious version of this app will allow hacker for remote access a Android devices. Furthermore, all of these APK samples feature the OpenAI logo, commonly associated with ChatGPT, as their app icon. This further contributes to the scam story that these apps are somehow connected to the ChatGPT AI engine.
Researchers have warned that the emergence of ChatGPT-themed APK malware is a serious threat to the security and privacy of mobile devices. As if malware variants are capable of stealing sensitive information, engaging in unauthorized tracking of user activities, and causing significant financial losses.
What should ChatGPT users do?
- To protect yourself from this type of malware, you should take proactive measures. These include installing trusted antivirus software on your smartphone.
- Also, use caution when downloading apps from third-party sources.
- Always download apps from trusted sources. Also, always read carefully and verify who is the author of the app before downloading.
- Regularly update your device with the latest security patches whenever available.
