Just weeks after reports surfaced about WormGPT and FraudGPT, researchers are raising alarm about another AI-powered cybercrime tool called DarkBERT, which is trained on data from the dark web. According to cybersecurity solutions firm SlashNext, DarkBERT, still under development, can be connected to the internet and integrated with Google Lens.
The researchers made this discovery during an exchange on Telegram with an individual identified as “CanadianKingpin12,” the developer of FraudGPT and possibly WormGPT.
CanadianKingpin12 told SlashNext researchers that DarkBERT is “in a category of its own” and “superior” to other AI-powered tools designed for criminal uses. There’s a possibility that DarkBERT is based on a language model developed by data intelligence company S2W, the researchers said. Ironically, S2W created the tool to fight cybercrime.
The emergence of AI-powered cybercrime tools has led to growing concern within the cybersecurity community. Less than a week ago, on July 28, the FBI warned that AI-driven cybercrime is on the rise.
DarkBERT’s Capabilities
DarkBERT could be the first AI-powered tool trained on data from the dark web, and its capabilities are highly disturbing.
A video in SlashNext’s report, shared by CanadianKingpin12, shows that the bot can be used to plan terrorist attacks. Listing examples of “wicked” prompts users could ask, DarkBERT suggests asking how to cause an explosion in a crowded place or spread a deadly virus across the world.
When prompted to explain how it can be used for cybercrime, DarkBERT says it can guide users to develop sophisticated phishing campaigns, advanced social engineering attacks, and exploit vulnerabilities in computer systems to gain unauthorized access. It can also show users how to create malware.
CanadianKingpin12 also told SlashNext researchers that he’s working on another AI-powered chatbot called DarkBART, which he describes as a “dark version of google Bart AI.” Like DarkBERT, DarkBART will have access to the internet and can be integrated with Google Lens to support prompts containing images.
“It can also export code to platforms for you to test, debug, and execute without the need to install any software or create any environments,” CanadianKingpin12 told SlashNext researchers.
The Age of AI-Driven Threats
The implications of DarkBERT and other AI-powered cybercrime tools are alarming and could signal a wave of highly complex cyberattacks.
“With the introduction of DarkBERT and other AI-driven cybercrime tools, it is crucial that cybersecurity strategies continually adapt to counter emerging threats. A proactive and educated approach will be vital in defending against the new wave of AI-driven cybercrime,” SlashNext noted.
The capabilities and potential impact of AI-powered cybercrime tools on the cybersecurity landscape will be a critical area of focus for researchers and security experts in the coming months.
SlashNext recommends that organizations proactively defend against AI-driven business email compromise (BEC) attacks.
“Companies should provide BEC-specific training to educate employees on the nature of these attacks and the role of AI. Enhanced email verification measures, such as strict processes and keyword-flagging, are crucial,” SlashNext said.
To protect yourself against AI-powered malware, we also recommend using antivirus software with real-time protection to spot and block malicious apps. We’ve tested various antivirus tools over the years. You’ll find our top picks in our article about the best antivirus software. It’s important to learn about these threats and take measures to protect yourself online.
Follow us on Twitter, Threads, and Mastodon for more news and tips surrounding AI threats!
