Russia-linked group uses ChatGPT for cyberattacks
TL;DR. A Russia-linked cyber espionage group, GREYVIBE, used ChatGPT, Gemini, and Ideogram AI to facilitate cyberattacks against Ukrainian targets. - The group systematically employed AI for lure development, malware creation, and infrastructure setup in their operations. - This AI integration allowed the group to accelerate development cycles and mask previous activities. - Researchers observed operational security errors despite the AI tooling, indicating gaps in their capabilities.
- GREYVIBE used OpenAI's ChatGPT, Google's Gemini, and Ideogram AI across multiple stages of cyberattacks.
- AI tools assisted in crafting spear-phishing emails, creating malware, and setting up infrastructure.
- The operations targeted Ukrainian military, government, civilian, and business organizations.
- AI use was 'operationally integrated' to compensate for capability gaps and accelerate development.
Sources
- Russia-linked threat group put ChatGPT to work from lure to payload — theregister.com
- bleepingcomputer.com — bleepingcomputer.com