Incident 736: Underground Market for LLMs Powers Malware and Phishing Scams

Description: A study by Indiana University researchers uncovered widespread misuse of large language models (LLMs) for cybercrime. Cybercriminals, according to that study, use LLMs like OpenAI's GPT-3.5 and GPT-4 to create malware, phishing scams, and scam websites. These models are available on underground markets, often bypassing safety checks through jailbreaking. Named malicious LLMs are BadGPT, XXXGPT, Evil-GPT, WormGPT, FraudGPT, BLACKHATGPT, EscapeGPT, DarkGPT, and WolfGPT.

Tools

New Report New Response DiscoverView History

Entities

View all entities

Alleged: OpenAI developed an AI system deployed by Cybercriminals , BadGPT , XXXGPT , Evil-GPT , WormGPT , FraudGPT , BLACKHATGPT , EscapeGPT , DarkGPT and WolfGPT, which harmed internet users , Organizations and Individuals targeted by malware.

Incident Stats

Incident ID

736

Report Count

Incident Date

2023-12-01

Editors

Daniel Atherton

Applied Taxonomies

Incident Reports

Reports Timeline

Studying Underground Market for Large Language Models, Researchers Find OpenAI Models Power Malicious Services

techpolicy.press

techpolicy.press · 2024

Despite the hype around them, readers of Tech Policy Press are well aware that the advance of large language models (LLMs) and their various applications-- ranging from chatbots and coding assistants to recommendation systems-- has raised v…

Variants

A "variant" is an incident that shares the same causative factors, produces similar harms, and involves the same intelligent systems as a known AI incident. Rather than index variants as entirely separate incidents, we list variations of incidents under the first similar incident submitted to the database. Unlike other submission types to the incident database, variants are not required to have reporting in evidence external to the Incident Database. Learn more from the research paper.