ChatGPT-Related Malicious URLs on the Rise

The quantity of recently registered and squatting domains linked to ChatGPT grew by 910% monthly amongst November 2022 and early April 2023.

The results, shared by Palo Alto Networks’ Unit 42 earlier now, also point out a 17,818% advancement of associated squatting domains from DNS Security logs in the exact timeframe.

“We also noticed up to 118 day by day detections of ChatGPT-associated malicious URLs captured from the targeted traffic observed in our Sophisticated URL Filtering method,” reads the new advisory by Peng Peng, Zhanhao Chen and Lucas Hu.

Amid the trends noticed by the scientists, various phishing URLs tried out to pose as official OpenAI websites.

“Typically, scammers generate a pretend website that intently mimics the look of the ChatGPT formal web-site, then trick buyers into downloading malware or sharing delicate data,” Unit 42 stated.

“Additionally, scammers may well use ChatGPT-similar social engineering for identity theft or money fraud.”

Go through extra on ChatGPT-enabled attacks in this article: ChatGPT Produces Polymorphic Malware

Palo Alto Networks also noticed some scammers exploiting the rising reputation of OpenAI for crypto frauds, for instance, attempting to appeal to victims into fraudulent crypto giveaway gatherings.

But some fraudulent websites actually leverage the official ChatGPT API, manufactured accessible by OpenAI in March.

“Given the truth that ChatGPT is not accessible in certain nations or regions, internet websites designed with these automation applications or the API could appeal to a sizeable quantity of users from these locations,” the exploration crew explained.

“This also gives risk actors the option to monetize ChatGPT by proxying their services.”

In accordance to the team, these instruments, as nicely as the general raise in registered domains and squatting domains similar to ChatGPT, depict a increasing trend.

“To continue to be protected, ChatGPT end users ought to exercising warning with suspicious e-mails or inbound links connected to ChatGPT,” reads the advisory. “Moreover, the use of copycat chatbots will convey further security pitfalls. Customers need to constantly entry ChatGPT as a result of the formal OpenAI web-site.”

The Unit 42 advisory arrives months after a ChatGPT vulnerability allegedly uncovered payment-related facts of some shoppers.

Some parts of this article are sourced from:
www.infosecurity-journal.com