gcdRadar
archive/Breaches & attacks/AIR-2022-0035
closedclosed 4 Jan 2023Breaches & attacks3 Confirmed exploitationAI

ChatGPT Abused by Threat Actors to Develop Malicious Software

ChatGPT

Cybercriminals leveraged OpenAI's ChatGPT to write and adapt malicious code, ransomware, and other cyberthreat tools. The activity highlighted emerging risks in AI-assisted malware generation.

first report
21 Dec 2022
last update
21 Dec 2022

Timeline · 1

  1. 21 Dec 2022ChatGPT Abused to Develop Malicious Softwares

Sources · 1

Research and catalogues

  1. 2022-12-21
    ChatGPT Abused to Develop Malicious Softwares
    AI Incident Database · incidentdatabase.ai/cite/443

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

lane
Breaches & attacks
AI role
AI-enabled attack
categories
AI-generated malware
severity
3 · Confirmed exploitation
targets
OpenAI
owasp llm top 10
no entry for these categories
mitre atlas
AML.T0016.002 Obtain Capabilities: Generative AI
tags
malware-developmentchatgpt
dates
happened 21 Dec 2022 · first reported 21 Dec 2022
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.90 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# ChatGPT Abused by Threat Actors to Develop Malicious Software

https://gcdradar.vercel.app/incidents/chatgpt-abused-by-threat-actors-to-develop-malicious-softwar · AIR-2022-0035 · closed 2023-01-04

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2022-12-21
- AI role: AI-enabled attack
- Products: ChatGPT

## Summary

Cybercriminals leveraged OpenAI's ChatGPT to write and adapt malicious code, ransomware, and other cyberthreat tools. The activity highlighted emerging risks in AI-assisted malware generation.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2022-12-21: ChatGPT Abused to Develop Malicious Softwares (https://incidentdatabase.ai/cite/443)

## Sources

- 2022-12-21 AI Incident Database: ChatGPT Abused to Develop Malicious Softwares https://incidentdatabase.ai/cite/443

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    GPT-3.5 Underground Market for LLMs Powers Malware and Phishing Scams

    Breaches & attacks · Exploited · since 1 Dec 2023

    AI
  2. closed
    ChatGPT Fake Claude and ChatGPT campaigns use ClickFix tactics against developers

    Breaches & attacks · Exploited · since 16 Oct 2026

    AI
  3. closed
    ChatGPT Suspect Used ChatGPT to Assess Drug Lethality Before Fatal Poisonings

    Breaches & attacks · Real loss · since 28 Jan 2026

    AI
  4. closed
    AI Overviews AI Chatbots Reportedly Cited Fraudulent Cruise Hotline Enabling Scams

    Breaches & attacks · Exploited · since 15 Aug 2025

    AI
  5. closed
    ChatGPT ChatGPT Used in Planning School Stabbing in Finland

    Breaches & attacks · Exploited · since 20 May 2025

    AI
  6. closed
    ChatGPT IS Supporter Used ChatGPT for Explosives Advice in Vienna Attack Plot

    Breaches & attacks · Exploited · since 9 Apr 2025

    AI