Ankura CTIX FLASH Update - February 24, 2023

Malware Activity

Threat Actors Are Taking Advantage of ChatGPT's Popularity to Spread Windows and Android Malware

Threat actors have been observed spreading malware through ChatGPT-based phishing campaigns as the platform's popularity continues to rise. ChatGPT, a natural language processing chatbot that interacts with users' prompts to provide responses in a human-like text structure, was launched by OpenAI in November 2022 and had over 100 million users by January 2023. Though the platform has been widely used for legitimate purposes, researchers have identified various cases of ChatGPT-based lures and fraudulent phishing websites that focus on distributing malware and exfiltrating victims' credit card information. Some of these websites have been promoted through additional fraudulent sites impersonating OpenAI's social media page. Researchers detailed that one of the observed posts contained a link that leads victims to a typosquatted domain that disguises