Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Artificial Intelligence

OpenAI Bans ChatGPT Accounts Used by Chinese Group for Spy Tools

OpenAI has banned ChatGPT accounts used by Chinese threat actors, including ones leveraged for the development of spying tools.

ChatGPT vulnerability

OpenAI has released another report describing the actions it took recently to prevent the abuse of its artificial intelligence services by the United States’ adversaries and other threat actors. 

The AI company’s threat intelligence report for February highlights two operations that are believed to have been conducted by Chinese threat actors. 

In one of these operations, dubbed ‘Peer Review’ by OpenAI, ChatGPT accounts were leveraged to aid the development and distribution of spying tools. 

According to OpenAI, ChatGPT was used to edit and debug code for what appeared to be AI tools designed to ingest and analyze posts and comments from social media platforms (including X, Facebook, Telegram, Instagram, YouTube and Reddit) in search of conversations on Chinese political and social topics.

“Again according to the descriptions, one purpose of this tooling was to identify social media conversations related to Chinese political and social topics – especially any online calls to attend demonstrations about human rights in China – and to feed the resulting insights to Chinese authorities,” OpenAI explained.

The threat actor also used ChatGPT to generate descriptions and sales pitches for these tools. 

Advertisement. Scroll to continue reading.

While the surveillance tools appeared to leverage AI, OpenAI said they are not actually powered by the company’s services — ChatGPT was only used for debugging and creating promotional materials. 

The same group also used ChatGPT to conduct research, translate and analyze screenshots of English-language documents, and generate comments about Chinese dissident organizations.

The chatbot was also abused for a different China-linked operation that involved generating social media content written in English and long-form news articles written in Spanish. Some evidence suggests that this activity may be part of the disinformation campaign named Spamouflage.

OpenAI’s latest report also reveals that the company has shut down some accounts that may have been used in support of North Korea’s fake IT worker scheme. 

OpenAI previously reported shutting down ChatGPT accounts used by Iranian hackers to conduct research into attacking industrial control systems (ICS)

Related: OpenAI Finds No Evidence of Breach After Hacker Offers to Sell 20 Million Credentials

Related: Italy’s Privacy Watchdog Fines OpenAI for ChatGPT’s Violations in Collecting Users Personal Data

Related: OpenAI Rolls Out Compliance API and Integrations for ChatGPT Enterprise

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.

Register

This year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.

Register

People on the Move

Fable Security has appointed Jacob Berry as Chief Information Security Officer.

iCOUNTER has named Ali Waezzadah as Chief Information Security Officer.

Roger Hale has joined 1Kosmos as Chief Information Security Officer.

More People On The Move

Expert Insights

Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.