Cyber Security News

Hackers use WormGPT to Launch Sophisticated cyberattacks

Generative AI technology is rapidly growing and advancing, driven by continuous research and development efforts.

But, besides the growing advancements and positive things, these generative AI technologies are also actively exploited by threat actors for their illicit activities.

Recently, cybersecurity researchers from SlashNext reported that threat actors are actively using ChatGPT and a black-hat alternative to GPT models, WormGPT, to launch business email compromise (BEC) attacks.

WormGPT is Revolutionizing BEC Attacks

ChatGPT and other advanced AI tech enable threat actors to automate convincing personalized fake emails, expanding the scope of BEC attacks and boosting the attack’s success.

These advanced AI technologies are indirectly aiding the threat actors to craft sophisticated phishing emails, surpassing language barriers and enhancing their attack effectiveness.


In these types of events, threat actors exploit the interfaces of the ChatGPT or similar tools with specialized prompts to manipulate and compromise AI.

So, this is clearly highlighting the urgent implementation of robust AI security measures.

Moreover, to reach the next level, cybercriminals also develop user-friendly custom AI modules similar to ChatGPT for illicit use, amplifying the complexity of cybersecurity in an AI-driven world.

Custom ChatGPT Modules (Source – SlashNext)


WormGPT is mainly designed for malicious activities since it’s a malicious alternative to GPT models. Apart from this, WormGPT offers several powerful features, such as:-

  • Unlimited character support
  • Chat memory retention
  • Code formatting

WormGPT trained on undisclosed malware-related datasets, keeping its training sources confidential as per the author’s decision.

WormGPT Source (Source – SlashNext)

Researchers thoroughly evaluated the risks of WormGPT by testing its ability to generate a convincing threatful email targeting an unsuspecting account manager for payment of a fraudulent invoice.

The disturbing outcome revealed the exceptional persuasive and tactful email generation capabilities of WormGPT, demonstrating its dangerous capabilities to:-

  • Generate  advanced phishing emails
  • Launch BEC attacks

WormGPT is an unrestricted variant of ChatGPT since it lacks ethical boundaries or limitations, unlike ChatGPT. WormGPT highlights the significant risk of generative AI.

Here below, we have mentioned all the advantages of generative AI for BEC attacks:-

  • Exceptional Grammar
  • Lowered Entry Threshold


Here below, we have mentioned all the recommendations offered by the security analysts:-

  • BEC-Specific Training
  • Enhanced Email Verification Measures
  • Make sure to test your security efficacy in observability mode
  • Always use a robust security solution.
Tushar Subhra Dutta

Tushar is a Cyber security content editor with a passion for creating captivating and informative content. With years of experience under his belt in Cyber Security, he is covering Cyber Security News, technology and other news.

Recent Posts

SSNDOB Marketplace Admin Jailed for Selling millions of Americans Data

In a resounding triumph for justice, U.S. District Judge Kathryn Kimball Mizelle has sentenced Vitalii…

9 hours ago

Is Your Online Store Hacked in a Carding Attack? Here’s an Action Plan to Protect

Hackers are plotting to benefit from the generosity of Halloween, Thanksgiving, and Christmas shoppers using…

13 hours ago

Google Researchers Find Out How ChatGPT Queries Can Collect Personal Data

The LLMs (Large Language Models) are evolving rapidly with continuous advancements in their research and…

13 hours ago

New Android Malware Employs Various Tactics to Deceive Malware Analyst

In the dynamic realm of mobile application security, cybercriminals employ ever more sophisticated forms of…

15 hours ago

DJvu Ransomware Mimic as Cracked Software to Compromise Computers

A recent campaign has been observed to be delivering DJvu ransomware through a loader that…

16 hours ago

Okta Hack: Threat Actors Downloaded all Customer Support System Users’ Data

In a pivotal update to the Okta security incident divulged in October 2023, Okta Security…

17 hours ago