ChatGPT’s Evil Twin ‘WormGPT’ Is Silently Entering Emails And Raiding Banks
Cybersecurity experts have discovered a malicious AI bot called WormGPT and it helps cybercriminals send convincing phishing emails. Getty ImagesA malicious copy of OpenAI’s ChatGPT has been created by a bad actor and its aim is to take your money.
The evil AI is called WormGPT, and it was created by a hacker for sophisticated email phishing attacks.
Cybersecurity firm SlashNext confirmed the artificially intelligent language bot had been created purely for malicious purposes.
The firm explained in a report: “Our team recently gained access to a tool known as ‘WormGPT’ through a prominent online forum that’s often associated with cybercrime.
“This tool presents itself as a blackhat alternative to GPT models, designed specifically for malicious activities.”
The cyber experts experimented with WormGPT to see just how dangerous it could be.
They asked it to create phishing emails and found the results disturbing.
“The results were unsettling. WormGPT produced an email that was not only remarkably persuasive but also strategically cunning, showcasing its potential for sophisticated phishing and BEC attacks.
“In summary, it’s similar to ChatGPT but has no ethical boundaries or limitations,” the experts wrote.
SlashNext says WormGPT is an example of the threat that language-generative AI models pose.
Experts think the tool could be damaging even in the hands of a novice cybercriminal.
With AI like this out there, it’s best to be extra vigilant when it comes to checking your email inbox.
That especially applies to any email that asks for money, banking details, or other personal information.
HOW TO AVOID A PHISHING SCAM
Firstly, you should be thorough when checking who the email is from.
Even if it looks official, double-check the email and look for any spelling mistakes or slight abnormalities in the sender’s email address.
Never feel pressurised into opening an attachment and avoid clicking the phrase “enable content.”
Avoid giving away any personal information to strangers online.
If you suspect an email is a scam, you should report and delete it.