Ledger / 7 Oct 2025
Russian-speaking criminals vibe-coded RAT and stealers with ChatGPT
Confirmed
OpenAI states it banned the accounts and cites Telegram evidence.
The operator used ChatGPT accounts to prototype and fix post-exploitation and credential-theft components.
“accounts that were attempting to use the model to help develop and refine malware, including a remote‑access trojan, credential stealers, and features to evade detection”OpenAI
Sources
- Disrupting malicious uses of AI: October 2025 (report PDF)OpenAI · 7 Oct 2025 · primary source
- Disclosed
- 7 Oct 2025
- Activity
- 2025
- Actor
- Russian-speaking criminal operator (criminal), as attributed by OpenAI
- Nexus
- Russia
- Targets
- Unspecified
- What the AI did
- Malware dev, Evasion
- Model
- ChatGPT
- Model family
- OpenAI
- Model basis
- stated by vendor
- Autonomy
- assist
- Outcome
- Accounts banned.