The revolutionary innovations by AI (Artificial Intelligence) include generative AI that has various creative potential, but along with that it also raises serious concerns with malicious tools like WormGPT.
Since it’s a powerful generative AI-based tool, WormGPT enables attackers to create their own custom hacking tools that pose major cybersecurity challenges.
Just after its launch, WormGPT’s Telegram channel gained more than 5,000 active subscribers in just a week, showing the rapid adoption of the tool by threat actors to perform illicit activities and attacks.
WormGPT is a malicious AI tool that’s presented as a blackhat alternative to GPT models, using GPT-J LLM with the following key features:-
The developers of this AI tool assert its potential for malware, BEC phishing, and hacking tools, ensuring no user activity logs, and they accept cryptocurrency payments only.
With the continuous addition of new upgrades, WormGPT now permits users to import its code directly into their editor, showcasing its versatility.
While a website exists, WormGPT’s Telegram channel, created on July 16, 2023, has gained over 5,000 subscribers, becoming more popular for feature and pricing promotions, reads SOCRadar report.
AI advancements like OpenAI’s ChatGPT enable hackers to conduct convincing business email compromise (BEC) attacks with personalized and realistic fake emails, increasing their chances of success.
Generative AI in BEC attacks has dual benefits, and here below we have mentioned them:-
Defending against AI-driven BEC attacks demands a multi-layered strategy, blending tech solutions and user awareness.
Here below we have mentioned the recommendations offered by the cybersecurity analysts:-
Stay up-to-date with the latest Cyber Security News; follow us on GoogleNews, Linkedin, Twitter, and Facebook.
Researchers have discovered a critical flaw in Active Directory’s NTLMv1 mitigation strategy, where misconfigured on-premises…
Amazon Web Services (AWS) has issued a critical security advisory highlighting vulnerabilities in specific versions…
Rockstar2FA is a PaaS kit that mimics the legitimate credential-request behavior of cloud/SaaS platforms. Phishing…
A Russian software developer, aided by the National Technology Initiative, has introduced a groundbreaking AI…
A serious security flaw has been identified in Ivanti Connect Secure, designated as CVE-2025-0282, which enables…
Let’s Encrypt has announced plans to introduce six-day certificate options and support for IP address…