Chinese hackers tried to hack OpenAI using its own ChatGPT

OpenAI was attacked by Chinese cybercriminals who sent malware to OpenAI employees in archived files. “We have disrupted the alleged Chinese attacker SweetSpecter, who unsuccessfully launched phishing attacks against the personal and corporate email addresses of OpenAI employees,” OpenAI said. It is noteworthy that hackers from the SweetSpecter group used OpenAI tools to carry out their operations.

Image source: pexels.com

OpenAI has suspended an unspecified number of accounts it believes are linked to the SweetSpecter hacking group. Cybercriminals are reported to use OpenAI tools for purposes such as “reconnaissance, vulnerability research, script support, anomaly evasion, and development.”

During the phishing attack, hackers sent official letters to OpenAI employees about discovered shortcomings in the work of ChatGPT with attachments in the form of zip files, which allegedly contained a detailed description of the sender’s “problem.” When opening the zip file, a document appeared with a fake list of ChatGPT error messages, while in the background the SugarGh0st RAT malware took control of the PC, allowing hackers to steal data and gain access to the computer.

According to OpenAI, these attacks were unsuccessful – the letters were blocked by OpenAI’s internal security systems and did not reach corporate mailboxes. The company specifically noted that these attacks are unrelated to the successful hack of the OpenAI Newsroom X account last month, in which hackers managed to launch a crypto-phishing scam that emptied victims’ wallets.

Phishing emails are a real problem for both everyday consumers and employees of technology companies. Phishing attacks can lead to large-scale corporate data breaches or loss of funds and can be carried out via email, phone or text message. Studying the most common methods and types of attacks and basic digital hygiene helps to resist them.

According to the American cybersecurity company Palo Alto Networks, the SweetSpecter group previously attacked embassies, ministries, government officials and other political organizations in the interests of the Chinese government.