AkiraBot Operators Leverage OpenAI API to Automate Widespread Contact Form Spam

# AkiraBot Operators Leverage OpenAI API to Automate Widespread Contact Form Spam

https://gcdradar.vercel.app/incidents/akirabot-operators-leverage-openai-api-to-automate-widesprea · AIR-2024-0063 · closed 2024-09-15

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2024-09-01
- AI role: AI-enabled attack
- Products: ChatGPT API, AkiraBot

## Summary

Threat actors deployed a bot framework integrated with OpenAI's API to bypass CAPTCHAs and generate automated spam across tens of thousands of websites. OpenAI revoked the associated API key following notification by security researchers.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2024-09-01: AkiraBot Reportedly Used OpenAI to Spam Website Chats and Contact Forms at Scale (https://incidentdatabase.ai/cite/1365)

## Sources

- 2024-09-01 AI Incident Database: AkiraBot Reportedly Used OpenAI to Spam Website Chats and Contact Forms at Scale https://incidentdatabase.ai/cite/1365

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.