{"id":46984,"date":"2024-01-29T07:21:07","date_gmt":"2024-01-29T04:21:07","guid":{"rendered":"https:\/\/saudishopper.com.sa\/en\/?p=46984"},"modified":"2026-03-28T05:01:31","modified_gmt":"2026-03-28T02:01:31","slug":"cybercrime-ai-experimentation-in-the-dark-web-new-kaspersky-study","status":"publish","type":"post","link":"https:\/\/saudishopper.com.sa\/en\/cybercrime-ai-experimentation-in-the-dark-web-new-kaspersky-study\/","title":{"rendered":"Cybercrime AI experimentation in the dark web \u2013 new Kaspersky study"},"content":{"rendered":"\n

29 January 2024<\/p>\n\n\n\n

Kaspersky\u2019s Digital Footprint Intelligence service has found nearly 3000 dark web posts mainly discussing using ChatGPT and other LLMs for illegal activities.<\/strong> Threat actors are exploring schemes, from creating nefarious alternatives of the chatbot to jailbreaking the original and beyond. Stolen ChatGPT accounts and services offering their automated creation\u00a0en masse\u00a0flood dark web channels, reaching another 3000 posts.\u00a0<\/strong><\/p>\n\n\n\n

In 2023, Kaspersky Digital Footprint Intelligence service discovered nearly 3000 posts on the dark web,\u00a0discussing using ChatGPT for illegal purposes or discussing tools that rely on AI technologies. Even though chatter peaked in March, discussions persist.\u00a0<\/p>\n\n\n\n

\"The<\/a>
The dynamics of dark web discussion about the use of ChatGPT or other AI tools. Source: Kaspersky Digital Footrpint Intelligence<\/em><\/figcaption><\/figure>\n\n\n\n

\u201cThreat actors are actively exploring various schemes to implement ChatGPT and AI. Topics frequently include the development of malware and other types of illicit use of language models, such as processing of stolen user data, parsing files from infected devices, and beyond. The popularity of AI tools has led to the integration of automated responses from ChatGPT or its equivalents into some cybercriminal forums. In addition, threat actors tend to share jailbreaks via various dark web channels \u2013 special sets of prompts that can unlock additional functionality \u2013 and devise ways to exploit legitimate tools, such as those for pen-testing, based on models for malicious purposes,\u201d explained\u00a0Alisa Kulishenko, digital footprint analyst at Kaspersky.\u00a0\u00a0Apart from the chatbot and artificial intelligence mentioned, considerable attention is being given to projects like XXXGPT, FraudGPT, and others. These language models are marketed on the dark web as alternatives to ChatGPT, boasting additional functionality and the absence of original limitations.<\/p>\n\n\n\n

Stolen ChatGPT accounts for sale <\/strong><\/strong><\/h2>\n\n\n\n

Another threat for users and companies is the market for accounts for the paid version of ChatGPT. In 2023, another 3000 posts (in addition to the previously mentioned ones) advertising ChatGPT accounts for sale were identified across the dark web and shadow Telegram channels. These posts either distribute stolen accounts or promote auto-registration services, massively creating accounts on request. Notably, certain posts were repeatedly published across multiple dark web channels.<\/p>\n\n\n\n

\"The<\/a>
The dynamics of dark web posts offering stolen ChatGPT accounts or auto-registration services. Source: Kaspersky Digital Footrpint Intelligence<\/em><\/figcaption><\/figure>\n\n\n\n

\u201cWhile AI tools themselves are not inherently dangerous, cybercriminals are trying to devise efficient ways of using language models, thereby fueling a trend of lowering the entry barrier into cybercrime and, in some cases, potentially increasing the number of cyberattacks. However, it\u2019s unlikely that generative AI and chatbots will revolutionize the attack landscape \u2013 at least in 2024. The automated nature of cyberattacks often means automated defenses. Nonetheless, staying informed about attackers\u2019 activities is crucial to being ahead of adversaries in terms of corporate cybersecurity\u201d, says Alisa Kulishenko, digital footprint analyst at Kaspersky.<\/p>\n\n\n\n

Detailed research is presented on the official Kaspersky Digital Footprint Intelligence\u00a0web site<\/a>. To avoid threats related to cybercriminal activities in the shadow segment of the internet, it is worth implementing the following security measures:\u00a0<\/p>\n\n\n\n