Cybercriminals disguise malware as ChatGPT, steal sensitive social media credentials: Kaspersky report

Last Update: February 24, 2023, 09:11 IST

The purpose of this Trojan is to steal information about accounts saved from browsers such as Chrome, Edge, Firefox, and Brave. (Representational Image: Shutterstock / File)

According to cyber security firm Kaspersky, cyber criminals are distributing malware through Facebook communities, offering a fake desktop version of ChatGPT.

A new report on Thursday said a team of researchers has identified a new and ongoing malware campaign that takes advantage of the growing popularity of the ChatGPT AI chatbot.

According to cyber security firm Kaspersky, cyber criminals are distributing malware through Facebook communities, offering a fake desktop version of ChatGPT.

“This campaign targeting ChatGPT is a prime example of how attackers are leveraging social engineering techniques to exploit users’ trust in popular brands and services. It’s important for users to understand that, just because a service appears to be legitimate, doesn’t mean it is,” said Darya Ivanova, a security specialist at Kaspersky.

In addition to bots, users are infected with the Fobo Trojan, which steals sensitive data such as Facebook, TikTok, and Google account credentials, as well as personal and corporate financial information.

The report states that when users click on the link in the post, they are directed to a well-designed website that looks almost identical to the official ChatGPT website.

The website then instructs users to download a purported ChatGPT version for Windows, which is actually an archive containing an executable file.

The installation process then begins but ends abruptly with an error message stating that the program could not be installed.

In fact, the installation of the program proceeds without users’ knowledge and, according to reports, a new stealer trojan, Trojan-PSW.Win64.Fobo, is installed on the user’s computer.

This Trojan aims to steal account information saved from browsers such as Chrome, Edge, Firefox, and Brave.

As part of the attack, the Trojan steals login credentials as well as attempts to obtain additional information, such as the amount of advertising money and current balances of business accounts.

The attackers are going after the global market. The report mentions that users in Africa, Asia, Europe and the Americas have been targeted by fraudulent “desktop clients” for ChatGPT.

read all Latest Tech News Here

(This story has not been edited by News18 staff and is published from a syndicated news agency feed)