{"id":4307,"date":"2023-08-02T15:14:32","date_gmt":"2023-08-02T15:14:32","guid":{"rendered":"https:\/\/itegriti.com\/kw022024\/?p=4307"},"modified":"2023-10-11T10:47:01","modified_gmt":"2023-10-11T10:47:01","slug":"how-to-defend-against-the-capabilities-of-wormgpt","status":"publish","type":"post","link":"https:\/\/itegriti.com\/kw022024\/2023\/cybersecurity\/how-to-defend-against-the-capabilities-of-wormgpt\/","title":{"rendered":"How To Defend Against the Capabilities of WormGPT"},"content":{"rendered":"

The advancement of AI technologies, such as ChatGPT from OpenAI, has created a new opportunity for business email compromise (BEC) attacks. ChatGPT is an advanced AI model that produces text resembling that of a human based on the input it receives. Cybercriminals can utilize this technology to automate the generation of fake emails that appear convincing and personalized for the receiver, raising the likelihood of a successful attack.<\/em><\/p>\n

This technology has become a popular tool for malicious actors, providing them with faster and more efficient means of conducting cybercrimes. Research by SlashNext has discovered a new generative AI tool called WormGPT<\/a>, advertised on dark web forums as a means for adversaries to launch sophisticated phishing and BEC attacks.<\/p>\n

What is WormGPT?<\/h2>\n

“This tool presents itself as a blackhat alternative to GPT models, designed specifically for malicious activities,” security researcher Daniel Kelley said<\/a>. “Cybercriminals can use such technology to automate the creation of compelling fake emails, personalized to the recipient, thus increasing the chances of success for the attack.”<\/p>\n

The tool is described as the “biggest enemy of the well-known ChatGPT” that “lets you do all sorts of illegal stuff.” The tool uses the open-source GPT-J language model and boasts various features, including unlimited character support, chat memory retention, and code formatting capabilities.<\/p>\n

According to reports, WormGPT was trained on various data sources, focusing on information about malware. However, the tool’s creator decided to keep the identity of the individual datasets used during training a secret.<\/p>\n

Posts seen by ZDNet<\/a> on a Telegram channel purportedly created to advertise WormGPT suggest the tool developer is developing a subscription plan for access, with prices ranging from $60 to $700. According to a channel participant, there are already more than 1,500 users of WormGPT.<\/p>\n

What can WormGPT do?<\/h2>\n

Tools like WormGPT might be a potent weapon for a bad actor, especially as large language models (LLMs) are being abused to create convincing phishing emails and produce harmful code. ChatGPT and Google Bard are taking swift action to stop this.<\/p>\n

To thoroughly evaluate the potential risks connected with WormGPT, the security researchers at SlashNext ran experiments focused on BEC assaults. In one experiment, they instructed WormGPT to create an email that would intimidate a gullible account manager into paying a bogus invoice.<\/p>\n

The outcomes were disturbing. WormGPT created an email demonstrating its potential for advanced phishing and BEC attacks by being astonishingly persuasive and strategically astute. The tool is comparable to ChatGPT but without any moral or ethical restrictions. The research highlights the severe danger that generative AI tools like WormGPT offer, even in the hands of inexperienced cyber criminals.<\/p>\n

Why is WormGPT a danger to businesses?<\/h2>\n

WormGPT’s lack of ethical constraints highlights the danger posed by generative AI, allowing even novice attackers to launch attacks quickly and on a large scale without the necessary technological resources.<\/p>\n

Malicious generative AI systems like WormGPT help cybercriminals because they provide them the ability to:<\/p>\n