Security News > 2023 > May > Fake ChatGPT desktop client steals Chrome login data

Researchers are warning about an infostealer mimicking a ChatGPT Windows desktop client that's capable of copying saved credentials from the Google Chrome login data folder.

ChatGPT has not released an official desktop client, but this bogus version looks remarkably similar to what one would expect.

Infostealer disguised as ChatGPT. The infostealer is being distributed via a zip archive carrying a file named ChatGPT For Windows Setup 1.0.0.exe.

The fake ChatGPT client creates an AutoStart entry in the registry to ensure that the infostealer runs every time the infected machine starts up.

Attackers have lately been exploiting users' desire for a ChatGPT desktop and mobile app to deliver different types of malware.

ChatGPT does not have an official desktop client or mobile app, which means that such claims or offers should be treated with caution.

News URL

https://www.helpnetsecurity.com/2023/05/02/chatgpt-infostealer/