Stolen ChatGPT Accounts Sold on Dark Web: What You Need to Know

Over 100,000 ChatGPT accounts have been compromised and are being sold on the dark web, warns Singapore-based cybersecurity firm Group-IB. The credentials and contents of chat histories are accessible to anyone who is willing to pay on illegal marketplaces. Users’ personal information or company trade secrets could fall into the wrong hands if hackers access their accounts. The malware Raccoon was responsible for breaching the majority of the ChatGPT accounts, logging information from instant messengers, emails, and browsers, and sending it to the malware operator. While OpenAI emphasized the compromised accounts were due to malware on users’ devices, not its own systems, the organization is currently investigating. OpenAI advises users to utilize two-factor authentication, enable a strong password, change it regularly, and avoid entering sensitive information in ChatGPT prompts.