Malicious actors have been warming up to the new GhostGPT generative AI tool touted as "uncensored AI" facilitating a generation of malware code and phishing emails, with ads on cybercrime forums garnering thousands of views, reports SC Media.
Abnormal Security researchers said GhostGPT, which features a stringent no-logs policy and enables Telegram bot access, crafts a convincing phishing email template from Docusign when prompted. The researchers added that the tool was being promoted as a means for creating malware and exploits.
"Attackers now use tools like GhostGPT to create malicious emails that appear completely legitimate," said the researchers. "Because these messages often slip past traditional filters, AI-powered security solutions are the only effective way to detect and block them."
While GenAI continues to be mostly leveraged in business email compromise, ransomware operations FunkSec and a potential RansomHub affiliate have recently exploited the technology in recent campaigns. This news comes after an Egress report showing AI integration in 75% of phishing kits.
