Artificial IntelligenceCyber Security

Suspected Phishing that Mimicks WormGPT Surfaces on the Darknet

189
Example of the suspected WormGPT phishing pages' design and pricing. Source: Kaspersky Digital Footprint Intelligence. (source: Kaspersky Digital Footprint Intelligence)

Kaspersky Digital Footprint Intelligence experts have uncovered a series of websites on the shadow internet that appear to be selling fake access to the malicious version of ChatGPT AI tool, WormGPT.

On darknet forums and in illicit Telegram channels, Kaspersky experts have found websites and ads, offering fake access to the malicious AI tool and targeting other cybercriminals, that are apparently phishing sites.

These websites differ significantly in several ways and are designed as typical phishing pages. They have different designs and pricing. Payment methods also vary, ranging from cryptocurrencies, as originally proposed by the author of WormGPT, to credit cards and bank transfers.

This trend, while not an immediate threat to users, underscores the rising popularity of black-hat alternatives to GPT models and emphasizes the need for robust cybersecurity solutions.

An example of a suspected phishing scheme using the WormGPT name. (Source: Kaspersky Digital Footprint Intelligence)

“In the dark web, it is impossible to distinguish malicious resources with absolute certainty. However, there are many indirect pieces of evidence that suggest that the discovered websites are indeed phishing pages. It is a well-known fact that cybercriminals often deceive each other. However, recent phishing attempts may indicate the level of popularity of these malicious AI tools within the cybercriminal community. These models, to some extent, facilitate the automation of attacks, thereby emphasizing the increasing importance of trusted cybersecurity solutions,” explains Alisa Kulishenko, digital footprint analyst at Kaspersky.

To avoid threats related to the cybercriminal’s activities in the shadow segment of the internet, it is worth implementing the following security measures:

  • Use Kaspersky Digital Footprint Intelligence to help security analysts explore an adversary’s view of their company resources and promptly discover the potential attack vectors available to them. This also helps raise awareness about existing threats from cybercriminals in order to adjust your defenses accordingly or take counter and elimination measures timely.

  • Choose a reliable endpoint security solution such as Kaspersky Endpoint Security for Business that is equipped with behavior-based detection and anomaly control capabilities for effective protection against known and unknown threats.

  • Dedicated services can help combat high-profile attacks. The Kaspersky Managed Detection and Response service can help identify and stop intrusions in their early stages, before the perpetrators achieve their goals.  If you encounter an incident, Kaspersky Incident Response service will help you respond and minimize the consequences, for instance identify compromised nodes and protect the infrastructure from similar attacks in the future.

Written by
Tech Beat Philippines

Tech Beat Philippines is the social media news platform for all things technology. It is also a part of the GEARS section on Daddy's Day Out.

%s Comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Daddy’s Day Out is a platform that celebrates modern masculinity and offers a space where men can unite, learn, and grow together. It fosters a community where authenticity, support, and self-expression thrive unapologetically.

Related Articles

ChatGenie Launches AI Tech Set to Transform the BPO Landscape and Elevates Traditional Customer Service Roles

ChatGenie, a customer engagement solutions startup, introduced an AI-powered multi-agent framework that...

Businesses in Southeast Asia Face Over 23 Million Bruteforce Attacks in 2024, Reports Kaspersky

Kaspersky reported a massive record of over 23M bruteforce attacks targeting businesses...

Kaspersky Reveals IT Security Headaches: Data Protection, Complex Tech, and Downtime

Kaspersky IT Security Economics reported most companies are most concerned about productivity loss, securing...

Business in Southeast Asia Faced Over 140K Web Threats Everyday, Reveals Kaspersky

With Southeast Asia’s rapid digitalization, businesses in the region face a growing...