AI-generated cybercrime is expanding at a rapid pace, fueled by the emergence of new tools on the darkweb, warns a recent report by cybersecurity firm SlashNext. Two notable examples, WormGPT and FraudGPT, are just the beginning of a wave of AI tools that cybercriminals are developing to target victims.
FraudGPT, in particular, possesses a wide range of capabilities, including the creation of phishing scam web pages, writing malicious code and hacking tools, as well as producing scam letters. According to researchers at SlashNext, these tools are the brainchild of an individual named CanadianKingpin12, whom they engaged with via Telegram.
During their investigation, the researchers acted as potential buyers to learn more about FraudGPT and its features. Their inquiries led to the revelation of two new AI chatbots, DarkBart and DarkBert. These chatbots, claimed to be able to access the internet and utilize Google’s image recognition technology, could send both text and images.
DarkBert was originally developed as a legitimate tool by data intelligence company S2W to combat cybercrime. However, cybercriminals have now repurposed the technology for their nefarious activities. CanadianKingpin12 also mentioned that DarkBert could assist in advanced social engineering attacks, exploit vulnerabilities in computer systems, and distribute various types of malware, including ransomware.
To evade detection, the seller of these AI tools had to resort to encrypted messenger apps after being banned from publicly selling access to FraudGPT on the clear net. The clear net refers to the searchable internet accessible via search engines, while the darknet, or darkweb, is not indexed by search engines.
To counteract the growing threat of AI-generated cybercrime, SlashNext advises companies to take a proactive approach to cybersecurity training and implement enhanced email verification protocols. Unfortunately, according to another report by web security company Immunefi, attempts to use AI to combat cybercrime have not been very successful thus far. The report reveals that AI chatbots lack accuracy and specialized knowledge required to identify vulnerabilities and exploits.
Given the swift progression from WormGPT to FraudGPT and now DarkBert in less than a month, SlashNext emphasizes the significant impact of malicious AI on the cybersecurity landscape and predicts that these tools will make cybercrime more accessible to aspiring criminals.