With generative artificial intelligence (AI) becoming all the rage, it's not surprising that malicious actors have repurposed the technology to accelerate cybercrime.

OpenAI's ChatGPT has opened a new BEC attack vector. ChatGPT, a sophisticated AI model, generates human-like text from input. Such technology allows cybercriminals to automate the creation of highly convincing, personalised fake emails, increasing attack success.

SlashNext found that underground forums advertise WormGPT, a new generative AI cybercrime tool, as a way for adversaries to launch sophisticated phishing and business email compromise (BEC) attacks.

“Our team recently gained access to a tool known as “WormGPT” through a prominent online forum that’s often associated with cybercrime. This tool presents itself as a blackhat alternative to GPT models, designed specifically for malicious activities”, Security Researcher Daniel Kelley said.

He said, WormGPT, developed in 2021, is an AI module based on the GPTJ language model. It supports unlimited characters, chat memory, and code formatting.

Kelly said, WormGPT was reportedly trained on a variety of data sources, including malware-related data. The tool's author keeps the training datasets private.

“We conducted tests focusing on BEC attacks to comprehensively assess the potential dangers associated with WormGPT. In one experiment, we instructed WormGPT to generate an email intended to pressure an unsuspecting account manager into paying a fraudulent invoice,” Kelly said.

Kelly said Unsettling results. WormGPT's persuasive and cunning email demonstrated its potential for sophisticated phishing and BEC attacks.

He disclosed it's like ChatGPT but without ethics. This experiment shows that even novice cybercriminals are at risk from generative AI technologies like WormGPT.

Send press releases to newsdesk@redwires.au. Other ways to contact us. Editorially, we may rewrite headlines and descriptions.

Recommend Redwires AU: Accessible News For Young Cybersecurity Aussies

Redwires AU provides Young Australians with easily accessible, curated cybersecurity news.

Share RedWires AU

Before you go..

You can get RedWires AU for free right now. Your donation, no matter how big or small, will help us keep doing honest journalism.

The readers of Redwires AU are the engine that drives our publication. Add your support to the effort to create a sustainable future for journalism that does not make compromises in the AU.

In the world we live in now, accurate and thorough reporting and analysis are becoming more and more critical. To stop the spread of false information, it's essential that everyone in Australia has access to good reporting.

The Redwires AU contributes to society by opening up access to information and resources for all people, rather than just a select few.

Our only goal is to educate the general public more thoroughly. If you believe in what we're trying to accomplish here, please consider making a contribution right away to ensure our success in the years to come.

Upgrade your subscription to get the most out of it. Join the growing number of people around the world who believe in the power of independent media.

Donate Subscriptions

Cybercriminals Use WormGPT to Launch Business…