Cyber criminals are using ChatGPT
for cybercrimes
- Satish Venkatasubbu
Cyber Lawyer
www.cybermithra.in
Background
Starting this week, I am planning to write few articles on how various Artificial
Inteligence(AI) tools are helping cybercriminals, starting with ChatGPT.
ChatGPT is an AI-powered chatbot developed by artificial intelligence
research company OpenAI.
A chatbot is a computer software program which uses a field of machine learning called
natural language processing (NLP) to generate responses to user questions and prompts.
The GPT stands for "Generative Pre-trained Transformer," which refers to how ChatGPT
processes requests and formulates responses.
According to OpenAI, ChatGPT acquired 1 million users just 5 days
and now has more than 100 million users.
Alternatives or competitors to ChatGPT include Bard by google,
Bing AI by Microsoft, and ChatSonic.
What is it?
ChatGPT or applications developed using it can create essays, stories, code, images, movies,
convert text to voice, impersonate people voice/looks etc.
Though there are lots of positives and economic benefits of using ChatGPT kind of AI tools,
there are lot of new cybersecurity risks that
are also introduced by this advanced user
friendly technology. Elon Musk, who was
the co-founder of OpenAI, and Sam Altman,
who is the CEO and other co-founder agreed
that AI can possess huge cybersecurity risk.
Cybercriminals have also started using ChatGPT for writing malware programs, phishing,
creating deep fakes, extortion, creating sophisticated misinformation and there by riots or
clashes in society.
ChatGPT is bringing in reach, technology and sophistication which was beyond common
petty cybercriminals and helping them in committing sophisticated cybercrimes.
How its done
Fraudsters try to steal personal and financially sensitive data from user’s devices using
ChatGPT and then use that to commit cybercrimes or use ChatGPT for extortion or terrorism
in one of the below ways :
Phishing Cybercriminals are using ChatGPT to write emails and messages that are not only
grammatically correct but are credibly convincing, thereby increasing chances of victims
falling for it and steal their data.
Malware ChatGPT can be easily abused to create polymorphic malware program that is highly evasive
as well as difficult to detect for the signature based antivirus programs.
Ransom-
ware
Now cybercriminals with limited technical experience can use advanced AI to build core
elements of ransomware-type programs and extort companies and people.
Spoofing ChatGPT could be used by cybercriminal to assist in the creation of lookalike websites and
bots that deceive users into providing their information.
MisInfor- An AI tool using ChatGPT designed to mimic humans can produce an infinite supply of hateful
mation content varying slightly and post it on many social platforms thereby inciting riots through
misinformation.
How to protect yourself
from such frauds
Always follow the principle of ' Zero Trust, Pause and Authenticate'
for all digital transactions and news.
Never click on any hyperlink or scan a QR code in
messages or emails from strangers or in doubt.
Use a bank account with minimum funds for UPI transactions and
dont use your main account for UPI purposes.
Install good antivirus software and keep
updating it regularly.
How to protect yourself
from such frauds contd..
Use strong passwords and keep changing it often. My suggestion is use a
sentence with mixed case, number and a special character in your native
language which is easier for you to remember.
Keep checking regularly your bank statements, CIBIL score and transaction
statement, aadhaar authentication history and AIS statement on incometax
website for any unauthorised or unusual transactions.
If you are a victim of fraud
Immediately call 1930 cyber or
file a complaint on website
www.cybercrime.gov.in.
If you have shared Aadhaar with
someone, lock your Aadhaar card
at uidai.gov.in or on maadhaar app.
If you are a victim of
fraud contd..
Call the concerned bank and lodge a complaint
to freeze the funds.
Change the passwords/pins of your exposed banking
accounts.
If you had clicked on the hyperlink
in the message, then your device may
be infected with software virus,
either run antivirus or format or
factory reset the device.
Remedies available to
victim legally
One can register a criminal case in cyber police station under
section 419 (punishment for cheating by impersonation) and
420 (cheating and dishonestly inducing delivery of property)
464 (make a false document or false electronic record) and
465(Punishment for forgery) of Indian Penal Code(IPC).
section 43 (Penalty and compensation for damage to computer, computer
system, etc), section 66 (punishment for computer related offences - a person
committing data theft, transmitting virus into a system,
destroying data, hacking, or denying access to the computer or
network to an authorized person is imprisoned for a
maximum of 3 years or a fine of 5 lakh rupees or both),
section 66C(which prescribes penalties for identity theft
and states that anyone who fraudulently or dishonestly
uses a person's identity information will be subject to
imprisonment up to 3 years and a fine of up to 3 lakh rupees) and
Section 66D (punishment for fraud by impersonation using computer resources)
under of the Information Technology Act(IT) Act 2000.
If you liked what you read and viewed and found it
useful, please share it with your friends and family.
There is a single page poster on same in comment
section, you can share that too in social media.
Please visit www.cybermithra.in to find more such
useful and practical articles on preventing
cybercrime
