Cybercriminals’ New Weapon: FraudGPT AI Poses Grave Threats to Online Security

In a troubling development for cybersecurity experts, a new cybercrime generative artificial intelligence (AI) tool known as “FraudGPT” has emerged, following in the footsteps of its predecessor, WormGPT. The dangerous tool is being actively advertised on several dark web marketplaces and Telegram channels, raising concerns about the potential escalation of cybercriminal activities. Netenrich, a leading cybersecurity firm, has recently released a report exposing the existence of FraudGPT and the devastating consequences it could unleash.

ALSO READ: From India to China via Dubai: Rs 712 Crore Investment Fraud Busted By Hyderabad Police

A Sinister AI Bot Tailored for Offensive Purposes:

FraudGPT is described as an AI bot explicitly designed for offensive purposes, such as crafting sophisticated spear-phishing emails, creating cracking tools, carding, and other malicious activities. According to Rakesh Krishnan, a security researcher at Netenrich, the tool has been in circulation since at least July 22, 2023, and is available through a subscription model. Cybercriminals can access the tool by paying $200 per month, $1,000 for six months, or $1,700 for an entire year.

Online Alias “CanadianKingpin” Takes Credit:

The mastermind behind FraudGPT goes by the online alias “CanadianKingpin.” The actor boasts that the AI tool provides a wide array of exclusive tools, features, and capabilities without any boundaries, catering to the needs of individuals seeking to engage in cybercriminal activities. Among the sinister functionalities, the tool enables users to write malicious code, create undetectable malware, identify leaks and vulnerabilities, and undertake various nefarious activities.

ALSO READ: Here Is How You Can Protect Your Instagram Account From Phishing Attacks: 6 Tips To Know

Alarming Volume of Sales and Reviews:

The report states that FraudGPT has already garnered substantial attention on the dark web, with over 3,000 confirmed sales and positive reviews. This indicates that the tool is gaining popularity among cybercriminals, posing a serious threat to organizations and individuals worldwide.

The LLM Behind the Veil:

While the specific large language model (LLM) used to develop FraudGPT remains undisclosed, experts believe that its capabilities are driven by sophisticated AI technology. The anonymity surrounding the LLM further complicates the efforts to track and mitigate potential attacks launched using the tool.

Escalating Cybercrime Activities:

The emergence of FraudGPT signifies an alarming trend where cybercriminals are capitalizing on AI advancements to create new adversarial variants specifically engineered to conduct cybercrime with minimal restrictions. This development poses significant challenges for cybersecurity experts, who are increasingly grappling with novel and sophisticated cyber threats.

ALSO READ: Yes, iPhones Can Be Hacked And Here’s How To Deal With Hackers

A Launchpad for Novice Actors:

Besides the immediate risk posed by seasoned cybercriminals utilizing FraudGPT, there is a concern that the tool could serve as a launchpad for inexperienced actors seeking to carry out phishing and business email compromise (BEC) attacks at scale. Such attacks can lead to the theft of sensitive information and unauthorized wire payments, potentially causing significant financial and reputational damage to targeted organizations.

ALSO READ: Step By Step Guide: How To File Cybercrime Complaints Online In India

The Urgent Need for Enhanced Cybersecurity:

While ethical safeguards can be implemented in AI models, reimplementation of these technologies without such safeguards is not difficult for determined threat actors. Experts emphasize the importance of adopting a defense-in-depth strategy, combined with robust security telemetry and fast analytics. These measures are essential to detect and thwart fast-moving threats before they escalate into dangerous cyber incidents, such as ransomware attacks or data exfiltration.

As the threat landscape continues to evolve, cybersecurity professionals and organizations must remain vigilant and proactive in safeguarding their digital assets and sensitive information from the clutches of cybercriminals who exploit advanced AI tools like FraudGPT. Collaborative efforts from governments, cybersecurity firms, and businesses are crucial in countering the growing menace of cybercrime in the digital age.

Follow The420.in on

 Telegram | Facebook | Twitter | LinkedIn | Instagram | YouTube