Over 100,000 login credentials for OpenAI’s ChatGPT AI chatbot have been leaked onto the dark web, according to a report from Singapore-based cybersecurity firm Group-IB. The credential theft, which began in June 2022 and peaked in May 2023, was orchestrated using the Raccoon Infostealer malware, delivered to victims via phishing emails. Once infected, the malware collects login credentials, browsing history, and cookies, potentially including crypto wallet information.
Group-IB’s report indicates that the majority of the stolen ChatGPT credentials, approximately 41,000, were from the Asia-Pacific region. The firm recommends users update their passwords and implement two-factor authentication on their accounts.
The report also reveals that the Raccoon Infostealer was offered as “malware-as-a-service” (MaaS), allowing users to lease access to the illicit tools for a monthly fee. Mark Sokolovsky, allegedly involved in the Raccoon Infostealer operation, faces charges from the U.S. Department of Justice and could face 20 years in federal prison if convicted. OpenAI has pledged $1 million towards AI cybersecurity initiatives in response to such threats.
Source: decrypt.co
To mitigate potential threats, it is important to implement additional cybersecurity measures with the help of a trusted partner like INFRA www.infrascan.net or you can try your self using check.website.