uTalk

thrive

Member

Registered: 2023-01-04

Posts: 2,575

Over 100K stolen ChatGPT acc credentials have been sold on dark web.

Between June 2022 and May 2023, more than 101,100 compromised OpenAI ChatGPT account credentials were sold on illegal dark web marketplaces, with 12,632 of those credentials coming from India.

In a report shared with The Hacker News, Group-IB claimed that the credentials were found in information thief logs that had been made available for purchase on the dark web.

The company with its headquarters in Singapore reported that "the number of available logs containing compromised ChatGPT accounts reached a peak of 26,802 in May 2023.". "Over the past year, the highest concentration of ChatGPT credentials for sale have been seen in the Asia-Pacific region. ".

Pakistan, Brazil, Vietnam, Egypt, and the U.S. are the other nations with the greatest number of compromised ChatGPT credentials. S. France, Morocco, Indonesia, and Bangladesh.

More research has shown that the notorious Raccoon information thief (78,348), Vidar (12,984), and RedLine (6,773) are responsible for the majority of logs containing ChatGPT accounts that have been compromised.

Due to their capacity to steal passwords, cookies, credit card information, and other data from browsers and cryptocurrency wallet extensions, information stealers have grown in popularity among online criminals.

"Logs containing compromised information harvested by info thieves are actively traded on dark web marketplaces," Group-IB claimed.

The lists of domains found in the log and the information regarding the IP address of the compromised host are additional details about logs that are available on such markets. ".

They have not only lowered the bar for cybercrime but also act as a conduit for launching follow-up attacks using the siphoned credentials. They are typically offered based on a subscription-based pricing model.

Dmitry Shestakov, head of threat intelligence at Group-IB, stated that "many enterprises are integrating ChatGPT into their operational flow.".

ChatGPT.

"Workers use the bot to optimize proprietary code or enter classified correspondences. Given that ChatGPT's default configuration saves all conversations, threat actors could unintentionally gain access to a wealth of sensitive information if they manage to get hold of account credentials. ".

Users are advised to follow recommended password hygiene procedures and secure their accounts with two-factor authentication (2FA) to reduce the risk of account takeover attacks.

The development coincides with an ongoing malware campaign that uses adult content lures and phony OnlyFans pages to spread the DCRat (or DarkCrystal RAT), a modified version of AsyncRAT, a remote access trojan, and an information stealer.

According to eSentire researchers, the activity has been occurring since January 2023.
"In observed instances, victims were lured into downloading ZIP files containing a VBScript loader which is executed manually," they said.

The victims may have been drawn in by explicit images or OnlyFans content for different adult film actresses, according to the file naming convention. ".

It also comes in response to the discovery of a brand-new VBScript variant of the malware GuLoader (also known as CloudEyE), which uses decoys with tax-related themes to launch PowerShell scripts capable of retrieving and injecting Remcos RAT into a legitimate Windows process.

The Canadian cybersecurity firm stated in a report released earlier this month that "GuLoader is a highly evasive malware loader commonly used to deliver info-stealers and Remote Administration Tools (RATs)".

GuLoader uses user-initiated scripts or shortcut files to run numerous rounds of highly obscured commands and encrypted shellcode. As a result, a legitimate Windows process contains a memory-resident malware payload. ".

Vastextension

Member

Registered: 2022-11-19

Posts: 2,701

Re: Over 100K stolen ChatGPT acc credentials have been sold on dark web.

This is more of a reason for people to consider using Utopia AI which provides the needed privacy, security, and fair result, and is also available 24/7.

full

Member

Registered: 2023-01-06

Posts: 2,634

Re: Over 100K stolen ChatGPT acc credentials have been sold on dark web.

This is more of a reason for people to consider using Utopia AI which provides the needed privacy, security, and fair result, and is also available 24/7.

The purpose of Utopia AI is to provide helpful and informative responses to users who interact with it without the need for account registration.

Vastextension

Member

Registered: 2022-11-19

Posts: 2,701

Re: Over 100K stolen ChatGPT acc credentials have been sold on dark web.

This is more of a reason for people to consider using Utopia AI which provides the needed privacy, security, and fair result, and is also available 24/7.

The purpose of Utopia AI is to provide helpful and informative responses to users who interact with it without the need for account registration.

Utopia AI can answer questions about the Utopia ecosystem, its features, and its cryptocurrencies Crypton, Utopia USD, and beyond.

full

Member

Registered: 2023-01-06

Posts: 2,634

Re: Over 100K stolen ChatGPT acc credentials have been sold on dark web.

This is more of a reason for people to consider using Utopia AI which provides the needed privacy, security, and fair result, and is also available 24/7.

The purpose of Utopia AI is to provide helpful and informative responses to users who interact with it without the need for account registration.

Utopia AI can answer questions about the Utopia ecosystem, its features, and its cryptocurrencies Crypton, Utopia USD, and beyond.

Additionally, Utopia AI can provide recommendations on how to use the ecosystem, such as how to use its decentralized messaging and file transfer features, its financial services like the uWallet, and its network tunneling capabilities.

Vastextension

Member

Registered: 2022-11-19

Posts: 2,701

Re: Over 100K stolen ChatGPT acc credentials have been sold on dark web.

The purpose of Utopia AI is to provide helpful and informative responses to users who interact with it without the need for account registration.

Utopia AI can answer questions about the Utopia ecosystem, its features, and its cryptocurrencies Crypton, Utopia USD, and beyond.

Additionally, Utopia AI can provide recommendations on how to use the ecosystem, such as how to use its decentralized messaging and file transfer features, its financial services like the uWallet, and its network tunneling capabilities.

Overall, Utopia AI is designed to assist users in getting the most out of the UtopiaP2P ecosystem and beyond.

full

Member

Registered: 2023-01-06

Posts: 2,634

Re: Over 100K stolen ChatGPT acc credentials have been sold on dark web.

Utopia AI can answer questions about the Utopia ecosystem, its features, and its cryptocurrencies Crypton, Utopia USD, and beyond.

Additionally, Utopia AI can provide recommendations on how to use the ecosystem, such as how to use its decentralized messaging and file transfer features, its financial services like the uWallet, and its network tunneling capabilities.

Overall, Utopia AI is designed to assist users in getting the most out of the UtopiaP2P ecosystem and beyond.

Meanwhile, Utopia AI is unique in features while maintaining the philosophy of privacy, anonymity, and freedom of communication that the ecosystem was built upon.