AI hacking platform WormGPT has user data leaked, attackers claim

In a twist of Shakespearean irony, WormGPT user details have appeared on a popular data leak forum. A data sample from the AI hacking platform, along with the post’s author’s credibility, strongly supports the claims.

Key takeaways:

WormGPT allegedly suffered a data breach exposing personal details of 19,000 users.
The AI platform was specifically designed for cybercrime activities like malware development and password cracking.
Leaked user data could enable identity discovery, targeted phishing campaigns, and blackmail against WormGPT customers.

Key Takeaways by nexos.ai, reviewed by Cybernews staff.

The attacker claims to have obtained WormGPT details sometime earlier this month, exposing thousands of users of the large language model (LLM), which was launched specifically to foster malicious activities.

According to the post, the attacker obtained the personal details of 19,000 WormGPT users, including:

Emails
Payment data
Subscriptions
Users IDs
Other details

WormGPT hacking platform data breach — Data leak forum post announcing WormGPT data breach. Image by Cybernews.

WormGPT is a blackhat-made LLM designed with no restrictions on how users can use it. The service is made to appeal to individuals without deep hacking knowledge and offers subscription models with tiered pricing, ranging from $50 for a monthly access to $220 for lifetime access.

The makers of the service heavily emphasize that users can use the ChatGPT alternative “for literally anything.” Meanwhile, WormGPT’s Telegram channel reveals what “anything” really stands for.

“Have you ever had the desire to pick the password to someone else's or your old crypto wallet? If yes, we can help you in this matter!” reads a post on WormGPT Telegram.

Numerous other posts clearly indicate that the service is designed to enable users to commit cybercrime, from DDoS attacks and malware development to social engineering and the infiltration of secure systems.

WormGTP data breach sample — Sample of the allegedly leaked WormGPT user data. Image by Cybernews.

Meanwhile, the Cybernews research team investigated the data sample that the attacker attached to the breach announcement post. According to our team, the sample included several users and records.

The sample did include information that attackers claimed to have access to. Our team also noticed additional details, such as plan type, the currency used to pay, and the amount WormGPT users paid for a given plan.

The post was uploaded by a well-known forum user with numerous legitimate posts, making the likelihood of a WormGPT data breach taking place higher.

Malicious actors can exploit the leaked details in multiple ways. First, they could attempt to uncover the identities of WormGPT users, tying exposed email addresses to real people.

WormGPT users could also be targeted by highly targeted phishing campaigns. Users of the AI hacking service could also be subject to blackmail if attackers uncover illicit activities enabled by WormGPT use.