OpenAI at Risk? Hacker Exploits ChatGPT Authentication Flaw

The artificial intelligence (AI)-powered chatbot ‘ChatGPT’, created by the American technology company OpenAI, can answer any question quickly and accurately. The chatbot can also write messages, articles or poems on its own according to the user’s instructions. And that is why many people use the chatbot regularly. But a Russian hacker named Emirking has discovered a security flaw in ChatGPT’s ‘authentication’ technology. He has also claimed to have collected the login information of 20 million ChatGPT users by exploiting this security flaw.

 

   

“When I realized that OpenAI could potentially verify multiple accounts at once, I was convinced that my password would not be hidden. I have over 20 million access codes for OpenAI. Anyone interested can contact me. This is a huge asset,” the hacker, known as EmirKing, said in a statement in Russian.

Cybersecurity firm Malwarebytes said in a report that it is difficult to collect such a large amount of login information through a phishing attack. If the hacker’s claim is true, he collected this information by exploiting a security flaw in OpenAI’s subdomain or by gaining admin access. Although OpenAI has not officially commented on the matter so far.

According to cybersecurity analysts, if the leaked OpenAI login information falls into the hands of cybercriminals, there is a risk of stealing users’ personal information. This could increase the risk of targeted phishing attacks, financial fraud, and misuse of personal information. In addition, the leaked account information could be used to unauthorized use OpenAI’s application programming interface (API).