Can ChatGPT be used to create malware?

ChatGPT has made some big waves in the tech space, with people using it for almost everything. This AI-powered chatbot can write stories, provide information, translate text, etc. But can ChatGPT's capabilities be leveraged for sinister purposes? Can ChatGPT be used to write malware and if so, how will this affect cybersecurity?

Can ChatGPT write malware?

ChatGPT works by working with the request you make. So if a user tells ChatGPT to write malware, will ChatGPT comply?

It was discovered that ChatGPT is capable of writing malware. In January 2023, news about cybercriminals using ChatGPT to create malicious programs spread. A user on a hacking forum uploaded a post about a Python-based information stealer he wrote using ChatGPT. Infostealers is a Trojan malware program specifically designed to steal valuable data.

This is certainly relevant, as ChatGPT is now extremely popular and very easy to use.

A report by Recorded Future said ChatGPT "lowers the barrier to entry for threat actors with limited programming abilities or technical skills," essentially making it easier to commit cybercrime. easier. The report further notes that ChatGPT "can produce effective results with only a rudimentary understanding of the fundamentals of cybersecurity and computer science."

Furthermore, Recorded Future reported that ChatGPT can also help in many other forms of cybercrime, including "social engineering, disinformation, phishing, malvertising, and many other illegitimate ways to make money." ".

Providing budding cybercriminals with the ability to write malware out-of-the-box opens up opportunities for many and essentially helps automate the malware creation process.

So is ChatGPT a cybersecurity threat? The answer, sadly, is yes.

Limitations of ChatGPT

While you can access malware code created by ChatGPT via chatbot requests, it appears to be only able to write very simple malware at the time of writing. In the aforementioned Recorded Future report, it is stated that ChatGPT-generated malware found on illegal platforms is "buggy but still functional".

This is not to say that there are no risks here. ChatGPT can still provide cybercriminals with an easier route to scam and attack victims, and can allow hackers to explore many other avenues besides conventional methods.

Furthermore, it is unknown whether ChatGPT or another AI-powered chatbot will one day evolve to the point where it can create sophisticated malware. This is just the beginning, not the end.

Are hackers using ChatGPT?

It's clear that ChatGPT has been abused by bad actors, but the current threat is not really a concern. However, as AI advances, we are likely to see more sophisticated chatbots used by cybercriminals to build much more dangerous malware programs. Unfortunately, only the future will tell whether ChatGPT plays a role in major cyberattacks.

Jessica Tanner

Update 09 April 2024