If you spot a ChatGPT app or browser extension on Facebook, be careful: It could be malware.
Facebook's parent Meta today warned about an uptick in malware disguised as ChatGPT-related software. “Since March alone, our security analysts have found around 10 malware families posing as ChatGPT and similar tools to compromise accounts across the internet,” Meta said in a report(Opens in a new window).
The malicious activity prompted Meta to block over 1,000 links to ChatGPT-related malware on its services, which also include Instagram and WhatsApp. Meta says it notified "industry peers, researchers, and governments" about the links, too.
Meta says the malware can pose as browser extensions designed to work with ChatGPT. These browser extensions can be uploaded to official web stores, making them look legit.
“In fact, some of these malicious extensions did include working ChatGPT functionality alongside the malware,” the company added. So even if the app or extension does offer a real chatbot experience, don’t assume it's safe to use.
Meta says(Opens in a new window) the goal behind the ChatGPT-themed malware is “to run unauthorized ads from compromised business accounts across the internet.” One of the identified malware strains, dubbed NodeStealer, can also steal passwords from a victim's computer by looting the cookies and login information on the browser.
Other ChatGPT-themed malware arrived through ads or links to other third-party websites. Meanwhile, the malware itself could be hosted through services including Dropbox, Google Drive, Mega, MediaFire, Discord, Atlassian’s Trello, Microsoft OneDrive, and iCloud.
It’s no surprise hackers are pouncing on ChatGPT; cybercriminals often target the latest trends,
Read more on pcmag.com