Skip to main content
CPEBuddy
ChatGPT Analyzes Fake ChatGPT Malware

ChatGPT Analyzes Fake ChatGPT Malware

Source: YouTube · John Hammond · published May 18, 2023 · 17:34

Malware Analysis
No ratings yet Log in to rate
Transcript Available
Description

A sponsored Facebook post advertises a fake "GPT4" update that contains malware designed to steal Facebook cookies via a Chrome extension 0:13.

Key Takeaways:
• The website hosting the download is flagged by browsers as malicious, and the "free" file is actually a password-protected RAR archive containing a malicious payload 2:12.
• Extraction of the installer reveals a batch script that forces Google Chrome to load a malicious extension instead of the actual chatbot 5:38.
• De-obfuscating the JavaScript code in the extension confirms it harvests Facebook cookies and user agent data to send to Google Analytics 11:07.
• Dynamic analysis in a sandboxed environment verifies that the malware successfully installs and begins stealing credentials upon launch 14:12.

Be cautious of sponsored ads offering "free" AI tools, as they can serve as carriers for trojans that compromise social media accounts.

Sources:

  • 0:13 Malicious link and password-protected download
  • 2:12 Extracting the RAR malware file
  • 5:38 Batch script analysis
  • 11:07 Identification of the cookie-stealing payload
  • 14:12 Sandbox execution of the malware

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Malware Analysis. Commonly maps to: Security Operations, Security Architecture and Engineering. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

you can get the latest gpt4 update released on May 15th that is 80 times smarter than the old version super AI with human thinking with this activation code 999 you can get it for free except it's malware this is the sponsored Facebook post that is advertising this link FB ads hyphen tools.com and they have a download link to get AI chatgpt allegedly but it's not that at all this was sent to me by a viewer and I appreciate Google and Gmail already notifying me hey this looks like a sketchy dangerous email it includes a link that is hosting malware the website is malicious and they send a backup just in case it was offline by the time I got a chance to take a look at it now normally when I do some analysis videos we spend some time on the command line kind of digging into code and I'm gonna…