Forest Blizzard used ChatGPT for research, scripting and phishing content

Confirmed

OpenAI and Microsoft both state the accounts were tied to this actor; activity was limited, non-novel assistance.

The Russia-affiliated group used ChatGPT mainly for open-source research on satellite communication and radar imaging, plus scripting help.

“Forest Blizzard used our services primarily for open-source research into satellite communication protocols and radar imaging technology, as well as for support with scripting tasks.”OpenAI

Sources

Disrupting malicious uses of AI by state-affiliated threat actorsOpenAI · 14 Feb 2024 · primary source
Staying ahead of threat actors in the age of AIMicrosoft Security Blog · 14 Feb 2024 · primary source

Date: Feb 2024
Disclosed: 14 Feb 2024
Actor: Forest Blizzard (nation state), as attributed by OpenAI
Nexus: Russia
Targets: Government and defense-related targets (per source)
What the AI did: Recon, Malware dev
Model: ChatGPT (OpenAI services)
Model family: OpenAI
Model basis: stated by vendor
Autonomy: assist
Outcome: OpenAI accounts disabled in coordination with Microsoft.