Security News > 2023 > January > ChatGPT-Written Malware

Within a few weeks of ChatGPT going live, participants in cybercrime forums-­some with little or no coding experience­-were using it to write software and emails that could be used for espionage, ransomware, malicious spam, and other malicious tasks.

The Python code combined various cryptographic functions, including code signing, encryption, and decryption.

One part of the script generated a key using elliptic curve cryptography and the curve ed25519 for signing files.

Another part used a hard-coded password to encrypt system files using the Blowfish and Twofish algorithms.

A third used RSA keys and digital signatures, message signing, and the blake2 hash function to compare various files.

ChatGPT-generated code isn't that good, but it's a start.

News URL

https://www.schneier.com/blog/archives/2023/01/chatgpt-written-malware.html