Saturday , March 29 2025

Trade of Stolen ChatGPT Premium Accounts on Dark Web, Lifetime Access for $24.99

Since the launch of OpenAI’s ChatGPT, the security risk the chatbot poses has been a major topic of discussion among cybersecurity experts.

However, the AI chatbot has yet again com]e under the scanner after a report revealed the trade of stolen ChatGPT premium accounts on the dark web.

FBI investigating cyberattack at Oracle, Bloomberg News reports

The Federal Bureau of Investigation (FBI) is probing the cyberattack at Oracle (ORCL.N), opens new tab that has led to...
Read More
FBI investigating cyberattack at Oracle, Bloomberg News reports

OpenAI Offering $100K Bounties for Critical Vulns

OpenAI has increased its maximum bug bounty payout to $100,000, up from $20,000, to encourage the discovery of critical vulnerabilities...
Read More
OpenAI Offering $100K Bounties for Critical Vulns

Splunk Alert User RCE and Data Leak Vulns

Splunk has released a security advisory about critical vulnerabilities in Splunk Enterprise and Splunk Cloud Platform. These issues could lead...
Read More
Splunk Alert User RCE and Data Leak Vulns

CIRT alert Situational Awareness for Eid Holidays

As the Eid holidays near, cybercriminals may try to take advantage of weakened security during this time. The CTI unit...
Read More
CIRT alert Situational Awareness for Eid Holidays

Cyberattack on Malaysian airports: PM rejected $10 million ransom

Operations at Kuala Lumpur International Airport (KLIA) were unaffected by a cyber attack in which hackers demanded US$10 million (S$13.4...
Read More
Cyberattack on Malaysian airports: PM rejected $10 million ransom

Micropatches released for Windows zero-day leaking NTLM hashes

Unofficial patches are available for a new Windows zero-day vulnerability that allows remote attackers to steal NTLM credentials by deceiving...
Read More
Micropatches released for Windows zero-day leaking NTLM hashes

VMware Patches Authentication Bypass Flaw in Windows Tool

On Tuesday, VMware issued an urgent fix for a security flaw in its VMware Tools for Windows. CVE-2025-22230 allows a...
Read More
VMware Patches Authentication Bypass Flaw in Windows Tool

IngressNightmare
Over 40% of cloud environments are vulnerable to RCE

Kubernetes users of the Ingress NGINX Controller are advised to fix four newly found remote code execution ( RCE) vulnerabilities,...
Read More
IngressNightmare  Over 40% of cloud environments are vulnerable to RCE

(CVE-2025-29927)
Urgently Patch Your Next.js for Authorization Bypass

Next.js, a widely used React framework for building full-stack web applications, has fixed a serious security vulnerability. Used by many...
Read More
(CVE-2025-29927)  Urgently Patch Your Next.js for Authorization Bypass

Oracle refutes breach after hacker claims 6 million data theft

A hacker known as “rose87168” claims to have stolen six million records from Oracle Cloud servers. The stolen data includes...
Read More
Oracle refutes breach after hacker claims 6 million data theft

According to a report by Check Point research, cybercriminals are able to get around OpenAI’s geofencing restrictions and get unlimited access to ChatGPT through stolen ChatGPT premium accounts that are being traded on underground forums.

Cybercriminals are using software such as ‘account checker’ to brute force accounts and log in.

Trade of Stolen ChatGPT Premium Accounts
Stolen ChatGPT credentials found on underground forums (Photo Check Point)

Using tools for the trade of stolen ChatGPT premium accounts

Gaining access to legitimate users’ ChatGPT accounts was done using brute force attacks among other techniques.

Researchers suspect that a ChatGPT account checker tool was also used to gain the credentials of users and scrape and parsing of data.

Selenium was also used for unit testing, credential stuffing, and cross-checking accounts on multiple other platforms.

To access web applications, SilverBullet, which is a web testing suite was employed to undertake requests on a web application.

Similarly, research suggests that this exploitation of ChatGPT credentials has been conducted using legitimate tools including those for automated pen testing.

Such tools allowed sellers on the underground forums to conduct automatic checking of credentials while gaining unauthorized access to them. This process of credential checking took a minute for validating 50 to 200 credentials.

They were found selling and often given for free in the trade of stolen ChatGPT premium account credentials.

Services and tools were also found being sold on underground forums that could be used to check the validity of the stolen credentials.

The cost of a lifetime upgrade of a regular ChatGPT Plus account created using the illegally bought credentials was $59.99.

OpenAI offers this service for $20 per month. A shared lifetime account with a cybercriminal was charged at a lower cost of $24.99.

Adding to the conundrum, reviews left by buyers involving the trade of stolen ChatGPT premium accounts can also be found on the underground forums.

Targeting Premium accounts in the trade of stolen ChatGPT accounts

Using ChatGPT calls for certain security measures to ensure online safety.

Besides not sharing official or other email addresses related to banks, it is imperative that users not share their contact details on it. Creating a secondary email and not mentioning sensitive data in its query is also good practice.

ChatGPT has been banned in Italy, while the United Kingdom announced plans to reconsider the regulations around it.

Canada has launched a probe on ChatGPT after the Office of the Privacy Commissioner received a complaint that the service collected, used, and disclosed personal information without the consent of users.

“AI technology and its effects on privacy is a priority for my Office,” Philippe Dufresne, Privacy Commissioner, Canada, declared in a statement. “We need to keep up with – and stay ahead of – fast-moving technological advances, and that is one of my key focus areas as commissioner.”

Check Also

NTT

Cyber attack at Japanese telecom leader NTT hits 18,000 companies

NTT Communications Corporation discovered illegal access to its facilities on February 5 and confirmed on …

Leave a Reply

Your email address will not be published. Required fields are marked *