Transmit Security has released an in-depth report into blackhat generative AI: ‘The GenAI-Fueled Threat Landscape’.
The report is the result of continuous investigation by a team of fraud analysts in the Transmit Security Research Lab and reveals how dark web marketplaces and fraud tools have changed since the release of generative AI (GenAI).
Key findings highlight the powerful capabilities of blackhat generative AI platforms that fraudsters are using to create new fraud campaigns at unprecedented levels of sophistication, speed and scale.
It’s easy to find malicious GenAI tools like FraudGPT and WormGPT, and it’s just as easy to use them — to probe for vulnerabilities, write malicious code, harvest data and create highly deceptive fraud. These tools have no security guardrails and require little to no skills.
Ido Rozen, Security Researcher Team Lead at Transmit Security
Key takeaways of Transmit Security’s dark web report include:
- Blackhat Gen-AI tools make it easier to create and automate fraud campaigns, resulting in an increased volume, velocity and variety of attacks.
- GenAI tools automate pentesting to find enterprise vulnerabilities and circumvent security used by specific targets.
- Configuration (config) files, generated with the assistance of GenAI, are used for validating accounts and can validate up to 500 credentials per minute.
- Bundled services like Remote Desktop Protocols (RDPs) and credit card checkers are augmented by AI to streamline attack creation.
- GenAI rapidly generates real or synthetic identity data to create hard-to-detect fraudulent accounts aged with 8+ years of order history to appear legitimate.
- GenAI makes it easy to create high-quality fake IDs that are able to bypass security checks, including most AI-driven identity verification.
- Video and voice deepfakes lure victims into scams, while voice cloning is able to trick call center voice authentication systems.
- Dark web markets offer 24/7 escrow and high seller ratings up to 4.99/5 to assure purchasers of product efficacy.
