Here’s something else AI can do: expose bad infosec to give cyber-crims a toehold in your organization

Group-IB discovered roughly 225,000 stealer logs containing ChatGPT credentials being sold on the dark web between January and October 2023, with a notable increase in the latter half of the period; these logs come from infostealing malware and risk exposing users' account data and stored ChatGPT interactions. The report highlights overlap with prior findings, the growing scale of infections, the involvement of cybercriminals (including ransomware groups) using such stolen data, and recommends mitigations such as enabling multi-factor authentication and regularly changing passwords.