Over 100,000 ChatGPT account credentials have been stolen, yours may be on the list!

Group-IB, a cybersecurity research company, just discovered through their newly implemented “Threat Intelligence” platform logs of info-stealing malware* traded on illicit dark web markets. So far it is estimated that around 100 000 accounts have been infected by software like Raccoon*, Vidar*, and Redline*, malware that held ChatGPT credentials. A peak of 26,802 compromised ChatGPT accounts was recorded in May 2023 (compare that to only 74 compromised during the month of June 2022).

Apart from privacy concerns, these leaks may lead to exposing confidential information due to ChatGPT being used by many employees across different industries. Also doesn’t help that OpenAI stores all of the user queries and AI responses. The company is currently under a lot of pressure considering these events…

Here is an infographic I’ve found that is quite interesting:

This infographic represents the top 10 countries by the number of compromised ChatGPT credentials as well as the total of compromised accounts between June 2022 and May 2023.

Cybersecurity is becoming more and more relevant in this age of misinformation; this post is to bring light to the events that transpired and to raise awareness. Remember to change your passwords once in a while! :)

Follow for more important AI news!

*Info-stealing malware: A specialized malware used to steal account passwords, cookies, credit card details, and crypto wallet data from infected systems, which are then collected into archives called 'logs' and uploaded back to the threat actors.

*Raccoon Info stealer%2C,bit%20systems%20Windows%2Dbased%20systems.) (Racealer): a simple but popular, effective, and inexpensive Malware-as-a-Service (MaaS) sold on Dark Web forums

*Vidar: A Malware-as-a-Service (MaaS) sold on Dark Web forums, the malware runs on Windows and can collect a wide range of sensitive data from browsers and digital wallets.

*RedLine Stealer: A malicious software that is a powerful data collection tool, capable of extracting login credentials from a wide range of sources, including web browsers, FTP clients, email apps, Steam, instant messaging clients, and VPNs.