Microsoft and OpenAI say hackers are using ChatGPT to improve cyberattacks
In a groundbreaking revelation, Microsoft and OpenAI have disclosed that cybercriminals are now harnessing the power of large language models (LLMs) like ChatGPT to advance their cyberattack capabilities. This collaboration between two of the tech industry's giants has shed light on how state-sponsored groups from countries such as Russia, North Korea, Iran, and China are turning to AI to research targets, refine scripts, and enhance social engineering methods.
The use of AI by these malicious entities marks a significant shift in the landscape of cybersecurity. Microsoft's blog post highlights the activities of several notorious groups, including the Russian-linked Strontium group, also known as APT28 or Fancy Bear, which has been active in the Russia-Ukraine conflict. This group has been utilising LLMs for tasks like understanding satellite communication protocols and automating technical operations, which could potentially streamline their hacking efforts.
Similarly, other groups like North Korea's Thallium, Iran's Curium, and various Chinese state-affiliated hackers have been employing LLMs for a range of purposes, from drafting phishing campaigns to generating code that evades antivirus detection. The sophistication of these AI-assisted strategies poses a formidable challenge to cybersecurity defences, highlighting an urgent need for innovative solutions.
In response to these emerging threats, Microsoft and OpenAI are taking proactive measures by shutting down accounts associated with these hacking groups and developing AI-driven tools to counteract AI-powered attacks. One such initiative is the introduction of Security Copilot, a cutting-edge AI assistant designed to aid cybersecurity professionals in identifying breaches and navigating the vast amounts of data generated by cybersecurity tools.
The revelation of AI's dual use in cyberattacks underscores the technology's potential for both innovation and exploitation. As AI tools become more accessible and their capabilities more advanced, the race between cybercriminals and cybersecurity defenders intensifies. Microsoft's emphasis on using AI to counteract AI attacks represents a critical step forward in this ongoing battle, signalling a new era in cybersecurity where AI plays a central role in both offence and defence.
As we move forward, the cybersecurity community must remain vigilant, constantly evolving its strategies to protect against the sophisticated threats posed by AI-assisted cyberattacks. The journey ahead is complex, but with continuous innovation and collaboration, it's a challenge that we are equipped to face.
Source - Tom Warren The Verge