Beware of Malicious ChatGPT Imposters: Warns Meta Security Analysts

Meta’s security team has been aware of the widespread occurrence of fake ChatGPT malware, reports the Verge. These exist to hack user accounts and take over business sites.

In its new Q1 security report, Meta reveals some interesting details. Meta shares how malware operators and spammers are following trends and hot topics that are garnering people’s attention. Of course, the most important technology trend right now is AI chatbots like ChatGPT, Bing, Bard, etc. So, tricking users into trying fake versions has become a new trend .

Since March, Meta Security Analysts have identified around 10 types of malware. These were masquerading as AI chatbot-related tools such as ChatGPT. Some of these even exist as web browser extensions or toolbars (classic). Some of them are also available from unnamed official web stores. As per reports of The Washington Post in last month, these fake ChatGPT scams are also making use of Facebook ads as another distribution channel.

Some of these malicious ChatGPT tools possess AI built in to make them look like legitimate chatbots. Meta blocked over 1,000 unique links to iterations of detected malware shared across the platform. The company also provided technical backgrounds regarding how scammers get access to accounts. This includes hijacking login sessions to maintain access. This is similar to how we removed Linus Tech Tips.

Meta offers a new support flow to fix it and regain access for businesses that have been hijacked or closed on Facebook. Business pages are commonly targeted for hacking. This is because the malware targets individual Facebook users with access.

Meta now offers a new Meta work account that supports existing, and typically more secure, single sign-on (SSO) authentication services from organizations that are not linked to an individual’s Facebook account at all. Once a business account is migrated, it is expected that it will become harder for malware such as the bizarro ChatGPT to attack.

Check out this article on Google which apparently intends to allow companies to use AI generated ad content.