According to a Singapore-Based CybeRSECURITY FIRM, Over 100,000 Login Credentials for ChatGPT, a Popular Artificial Intelligence Chatbotd By Openai, HAVE Been Leaked and Traded on the Dark Web in the Past Year. on June 20, indicate that between June 2022 and May 2023, more than 101,000 devices containing login information for ChatGPT were traded on darknet markets. Each log contained at least one combination of ChatGPT login credentials and passwords.
The data shows that the online black market witnessed a peak of nearly 27,000 ChatGPT-related credentials in May. Last year, the Asia-Pacific region accounted for the highest number of stolen logins, representing approximately 40% of the total. India had the highest number of compromised logins, surpassing 12,500, while the United States ranked sixth with nearly 3,000 compromised logins. France was the highest-ranking European country, placing seventh.
It's important to note that ChatGPT accounts can be created directly through OpenAI, and users can also choose to log in using their Google, Microsoft, or Apple accounts. While the research did not analyze the sign-up methods, it is believed that mainly accounts with "direct authentication methods" were targeted. OpenAI, however, was not responsible for the login exploit, as the identified logs containing saved ChatGPT credentials were not a result of any weaknesses in ChatGPT's infrastructure.
Group-IB's blog post highlights a concern trend of increased usage of ChatGPT by employees for work purposes. The firm warns that unauthorized users accessing the chatbot could potentially expose confidential company information, as user queries and chat histories are stored by default. Cybercriminals have infected Thousands of individual user devices worldwide to steal information. Group-IB emphasizes the importance of regular software updates and the use of two-factor authentication to mitigate such risks.
Interestingly, it is worth noting that the press release discussing these findings was written with the assistance of ChatGPT itself, demonstrating the capabilities of the AI chatbot in generating written content.
