A new cybersecurity threat has emerged as experts at Guardio Labs discover a fake ChatGPT-branded Chrome browser extension that can hijack Facebook accounts and create rogue admin accounts. This malicious software is yet another example of the various methods cyber criminals use to spread malware across the internet.
“This allows it to push Facebook paid ads at the expense of its victims in a self-propagating worm-like manner.” Guardio Labs researcher Nati Tal mentioned this in a technical report.
The success of ChatGPT – An opportunity to frauds
AI-powered chatbots, like OpenAI’s ChatGPT, have gained immense popularity due to their human-like interactions. However, cybercriminals are now creating fake versions of ChatGPT to deceive users and carry out malicious activities such as stealing sensitive data, spreading malware, or conducting phishing attacks. These threat actors use various tactics to trick people into downloading and installing fake chatbots.
There are alarming things:
- The dangers posed by these counterfeit versions of ChatGPT cannot be overemphasized. For one, they are often designed to look and act like the real ChatGPT, making it challenging for users to spot the difference.
- Once installed, they can access the user’s device, potentially compromising sensitive information, including personal and financial information.
Facebook users beware Fake ChatGPT – A gateway to cybercrime and malware spread.
- Fake ChatGPT add-on worked fast to access Facebook accounts to spread malware.
- Upon installation, the fake ChatGPT extension can bypass Facebook’s security measures and gain access to users’ accounts.
- It gives the attackers access to sensitive information such as personal data, messages, and contacts.
- The extension can create a fake admin account on the hijacked Facebook page, enabling the attackers to manipulate the page’s content, post malicious ads, and spread further malware.
“By hijacking high-profile Facebook business accounts, the threat actor creates an elite army of Facebook bots and a malicious paid media apparatus,” Guardio Labs researcher Nati Tal said in a technical report.
Engineered to perfection! But for what?
To add malware to users, the fake Chat GTP extension is completely mastered. The add-on purportedly offers the ability to connect to the ChatGPT service; its true intention is far more nefarious.
The entire process of adding these malicious apps to the user’s Facebook account is automated, making it virtually impossible for the user to detect the threat. The hijacked Facebook business accounts are then used for advertising the malware, increasing its reach and impact across the platform.
The real threat is that this malware and cyber hijacking is not only primarily run through Facebook, there are Fake ChatGPT Apps on Play Store that can cause loss too.
Google at action, but not on time!
The highly popular “Quick access to ChatGPT” browser extension was removed by Tech-giant Google from the Chrome Web Store on March 9, 2023, following concerns about its malicious capabilities. Since its release on March 3, 2023, the extension reportedly garnered 2,000 installations daily.
Conclusion
The world of malware and cyber threats is growing every day with new methods of mischief and fraud. It is high time to consciously use everyday apps and links so you don’t accidentally fall to be the next victim.
“Unfortunately, the success of the viral AI tool has also attracted the attention of fraudsters who use the technology to conduct highly sophisticated investment scams against unwary internet users,” Bitdefender unwrapped last week.
PureVPN
March 15, 2023
1 year ago
