Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Artificial Intelligence

OpenAI Bans ChatGPT Accounts Used by Chinese Group for Spy Tools

OpenAI has banned ChatGPT accounts used by Chinese threat actors, including ones leveraged for the development of spying tools.

OpenAI bug bounty program expansion

OpenAI has released another report describing the actions it took recently to prevent the abuse of its artificial intelligence services by the United States’ adversaries and other threat actors. 

The AI company’s threat intelligence report for February highlights two operations that are believed to have been conducted by Chinese threat actors. 

In one of these operations, dubbed ‘Peer Review’ by OpenAI, ChatGPT accounts were leveraged to aid the development and distribution of spying tools. 

According to OpenAI, ChatGPT was used to edit and debug code for what appeared to be AI tools designed to ingest and analyze posts and comments from social media platforms (including X, Facebook, Telegram, Instagram, YouTube and Reddit) in search of conversations on Chinese political and social topics.

“Again according to the descriptions, one purpose of this tooling was to identify social media conversations related to Chinese political and social topics – especially any online calls to attend demonstrations about human rights in China – and to feed the resulting insights to Chinese authorities,” OpenAI explained.

The threat actor also used ChatGPT to generate descriptions and sales pitches for these tools. 

While the surveillance tools appeared to leverage AI, OpenAI said they are not actually powered by the company’s services — ChatGPT was only used for debugging and creating promotional materials. 

The same group also used ChatGPT to conduct research, translate and analyze screenshots of English-language documents, and generate comments about Chinese dissident organizations.

Advertisement. Scroll to continue reading.

The chatbot was also abused for a different China-linked operation that involved generating social media content written in English and long-form news articles written in Spanish. Some evidence suggests that this activity may be part of the disinformation campaign named Spamouflage.

OpenAI’s latest report also reveals that the company has shut down some accounts that may have been used in support of North Korea’s fake IT worker scheme. 

OpenAI previously reported shutting down ChatGPT accounts used by Iranian hackers to conduct research into attacking industrial control systems (ICS)

Related: OpenAI Finds No Evidence of Breach After Hacker Offers to Sell 20 Million Credentials

Related: Italy’s Privacy Watchdog Fines OpenAI for ChatGPT’s Violations in Collecting Users Personal Data

Related: OpenAI Rolls Out Compliance API and Integrations for ChatGPT Enterprise

Written By

Eduard Kovacs (@EduardKovacs) is a managing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.

Register

Learn how integrating BAS and Automated Penetration Testing empowers security teams to quickly identify and validate threats, enabling prompt response and remediation.

Register

People on the Move

SplxAI, a startup focused on securing AI agents, has announced new CISO Sandy Dunn.

Phillip Miller is joining tax preparation giant H&R Block as VP and CISO.

Linx Security has appointed Sarit Reiner Frumkes as Chief Technology Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.