Surge in Android Malware Impersonating AI Chatbot ChatGPT – Fagen wasanni
Fagen Wasanni Technologies
All about XXI Century Technologies
Fagen Wasanni Technologies
Palo Alto Networks, a global cybersecurity leader, has discovered a rise in Android malware that is posing as the popular AI Chatbot ChatGPT. This malicious software has emerged following the launch of OpenAI’s GPT-3.5 and GPT-4, specifically targeting users interested in utilizing the ChatGPT tool.
The malware includes a Meterpreter Trojan which disguises itself as both a “SuperGPT” app and a “ChatGPT” app. Once installed, it secretly sends premium-rate text messages to phone numbers in Thailand, resulting in financial charges for the unsuspecting victims. These charges are then collected by the threat actors behind the malware.
It is important to note that Android users have the ability to download applications from sources other than the official Google Play store. This opens up the possibility for users to obtain apps that have not undergone the thorough vetting process conducted by Google.
Key findings indicate that this Android malware effectively impersonates ChatGPT. Its emergence aligns with the release of OpenAI’s GPT-3.5 and GPT-4, specifically targeting individuals interested in using ChatGPT.
Furthermore, the malware incorporates a Meterpreter Trojan, which allows remote access to infected Android devices once they have been successfully exploited.
The digital code-signing certificate used in the malware samples has been attributed to an attacker known as “Hax4Us.” This certificate has been identified across multiple instances of malware.
In some cases, the malware disguises itself as ChatGPT-themed apps and sends SMS messages to premium-rate numbers in Thailand. This results in financial charges for the victims and facilitates various scams and fraudulent activities.
For further details, the complete blog can be found [link removed].
