• By Vikas Yadav
  • Sat, 17 Jun 2023 04:00 PM (IST)
  • Source:JND

JE Technology Desk: Researchers from Palo Alto Networks Unit 42 observed a rise in malicious versions of the popular chatbot ChatGPT app on Android ever since the AI model rose to fame due to its groundbreaking capabilities. These versions started approaching the scene with the launch of GPT 3.5 by OpenAI and affected users who would have downloaded the malicious apps.

As per researchers, two active malware, 'SuperGPT,' a Meterpreter Trojan and 'ChatGPT' app, transmit messages to "premium-rate numbers" in Thailand, which incur charges for the victim. These programs were available for download via the website, links in email conversations and even on the Google Play Store. The package was reported to the tech giant for removal.

Also Read: Alert! Fake ChatGPT Apps Are The New Money Minting Machines For Developers; Check App List

These apps use an OpenAI logo that dupes the users to believe them to be genuine. It can send SMS messages to "Premium-rate numbers" that cost more than standard phone numbers and are used in exchange for a service (e.g., users providing information), the Unit 42 report said. While the threat actors behind this application collect revenue, it could transform into a scam later, speculates the report. 

Further, the report notes such apps can steal data, spy on users, and lead to losses for the victim. This malicious replica of the powerful AI tool can fetch remote access to an Android smartphone.

Meanwhile, ChatGPT is popular for its conversational style responses to user prompts. Similar replicas of the app were forged to scam users and earn money in the past.

How to be safe from malicious replicas of ChatGPT?

- Turn on Google Play Protect from the Play Store on your device

- Install a reputed antivirus on your smartphone

- Only download apps from trusted app markets and popular developers

With inputs from IANS