"Preventing Cybercrime with ChatGPT: A Look at How It Can Be Used for Hacking and Fraud"

AI tool ChatGPT has gained a lot of attention in recent months for its various capabilities, including answering questions, writing reports, and coding software. However, it has also been used for nefarious purposes by cybercriminals, according to cybersecurity research firm Checkpoint Research. They have discovered instances of ChatGPT being used to create malicious tools such as infostealers and encryption tools, as well as facilitating fraud.

One example of ChatGPT being used for malicious purposes was the creation of infostealers. On December 29, 2022, a thread named "ChatGPT - Benefits of Malware" appeared on a popular underground hacking forum. The publisher of the thread disclosed that they were using ChatGPT to recreate malware strains and techniques described in research publications and write-ups about common malware. These posts seemed to be demonstrating to less technically skilled cybercriminals how to utilize ChatGPT for malicious purposes, with real examples they could immediately use.

Another instance of ChatGPT being used for malicious purposes involved the creation of multi-layered encryption tools. On December 21, 2022, a threat actor dubbed USDoD posted a Python script, which they emphasized was the "first script [they] ever created." When another cybercriminal commented that the style of the code resembled OpenAI code, USDoD confirmed that OpenAI had given them a "nice [helping] hand to finish the script with a nice scope." This suggests that potential cybercriminals with little to no development skills could use ChatGPT to develop malicious tools and become "fully-fledged cybercriminals with technical capabilities," according to Checkpoint Research.

In addition to being used to create infostealers and encryption tools, ChatGPT has also been used to facilitate fraud. Checkpoint Research identified a case in which a cybercriminal demonstrated how to create a Dark Web marketplace script using ChatGPT. This type of marketplace is used for the automated trade of illegal or stolen goods such as stolen accounts, payment cards, malware, drugs, and ammunition, all paid for in cryptocurrencies.

It is clear that ChatGPT is attractive to cybercriminals because it can assist those with little or no development skills in creating malicious tools and becoming "fully-fledged cybercriminals with technical capabilities." It has the potential to greatly speed up the process for hackers by providing a good starting point for writing code. While ChatGPT can be used for good, it is important to recognize that it can also be utilized for malicious purposes. It is crucial for cybersecurity professionals to stay aware of new technologies and their potential risks, in order to protect against potential threats.