Exposure: ChatGPT for Windows—Unrelated Malware

OpenAI’s ChatGPT generative AI is being used for all manner of enterprising activities. But as with anything that rapidly gains popularity, it doesn’t take long before criminals try and use it to their advantage.Enter the ChatGPT Windows desktop client, a supposed full desktop client for ChatGPT that runs on Windows 10 and Windows 11.However, as good as a desktop ChatGPT client sounds, you shouldn’t trust any download links or adverts for such a tool because it doesn’t currently exist.

MUO VIDEO OF THE DAY

SCROLL TO CONTINUE WITH CONTENT

ChatGPT Desktop Client Is Actually Trojan Malware

In February 2023, cybersecurity firm Kaspersky reported that it had uncovered a malware campaign using ChatGPT as its lure, promising victims a free ChatGPT account with a $50 balance (to spend on the premium version of ChatGPT ) and the use of a new ChatGPT desktop client.

Unfortunately, it’s all a falsehood. The campaign uses fake accounts mimicking OpenAI or ChatGPT spread across several different social networks, including Twitter and Telegram, advertising access to a new ChatGPT trial.

Once the user clicks the link, it transports them to a page that looks exactly like the official ChatGPT site, albeit with the addition of a Download For Windows button. As you can probably guess, when you click the download button, you don’t receive a new trial version of a ChatGPT desktop client. Below you can see the real site, followed by the fake ChatGPT site.

Image Credit: Kaspersky

Close

Instead, you receive the Fobo Trojan, designed to steal user credentials for Facebook, Twitter, and other accounts, along with Google cookies and accounts, and “in particular, business accounts.”

If this archive is unpacked and the executable file run, then, depending on the version of Windows, the user sees either a message saying installation failed for some reason, or no message at all — at which point the process seems to end.

But the lack of a message or the Windows warning that your installation failed is just indicating that the ChatGPT malware was successfully installed.

According to Kaspersky’s research, the ChatGPT desktop client malware has been spotted across Asia, Africa, Europe, and America.

PSA: There Is No ChatGPT Desktop Client

Although the temptation of a new ChatGPT desktop client trial is alluring, no such product exists at the current time, nor has OpenAI given any signal that a full desktop client for ChatGPT is in the works.

For now, the only way to access ChatGPT is through your browser , be that on your computer or your smartphone.

3 Ways to Avoid ChatGPT Scams

1. First up, make sure you’re using the official ChatGPT website, and double-check the actual URL before signing up, adding your credentials, and so on: https://chat.openai.com/ or https://openai.com/blog/chatgpt .
2. Double-check any social media accounts against OpenAI’s official accounts. For example, on Twitter, OpenAI is the only account you should trust for official ChatGPT product releases and launches.
3. Make sure your antivirus software is up to date, and consider installing an additional security tool like Malwarebytes Premium to mop up any other nasties.

Avoid Anything Claiming to Be a ChatGPT Client

For now, there is no ChatGPT desktop client. ChatGPT is only available through your browser, and for the time being, that’s how the situation will stay.

Check-in with the official OpenAI account from time to time for ChatGPT news, but otherwise, if you see a post claiming to offer a trial account for a new ChatGPT product, give it a wide berth and report it to whatever platform you see it on.

SCROLL TO CONTINUE WITH CONTENT

Also read: