CyberSum logo
Back

AI-Enhanced Cyberattacks: Threat Actors Leverage ChatGPT

Cyber Security News by CyberSum.net
2 sources
Security researchers at Volexity have discovered that a threat actor group, UTA0388, is using AI platforms like ChatGPT to enhance their cyberattack capabilities. Since June 2025, the group has conducted sophisticated spear phishing campaigns, using AI to develop malware and craft multilingual phishing emails targeting organizations globally. The campaigns are notable for their linguistic diversity and the use of fabricated personas to socially engineer targets. Despite the linguistic fluency, the emails often lacked coherence, indicating AI assistance. The threat actors employed a rapport-building phishing approach, minimizing infrastructure exposure while building trust with potential victims before deploying malicious payloads.

Also Read

GlassWorm Malware Targets Developers via OpenVSX and VS Code

A new supply-chain attack is targeting developers on the OpenVSX and Microsoft Visual Studio marketplaces with self-spreading malware called GlassWorm. The malware, installed an estimated 35,800 times, hides its malicious code using invisible characters and spreads using stolen account information. It uses the Solana blockchain for command-and-control, making takedown difficult, with Google Calendar as a backup option. The malware steals credentials for GitHub, npm, and OpenVSX accounts, as well as cryptocurrency wallet data from 49 extensions. It also deploys a SOCKS proxy and installs VNC clients for invisible remote access. The final payload, called ZOMBI, turns infected systems into nodes for cybercriminal activities.

By Cyber Security News by CyberSum.net