258

ChatGPT's Scary Good at Getting People to Click Phishing Emails, IBM Finds (futurism.com)

submitted 9 months ago by stopthatgirl7@kbin.social to c/technology@lemmy.world

33 comments fedilink hide all child comments

IBM researchers said a ChatGPT-generated phishing email was almost as effective in fooling people compared to a man-made version.

you are viewing a single comment's thread
view the rest of the comments

[-] MysticKetchup@lemmy.world 140 points 9 months ago

IBM researchers said a ChatGPT-generated phishing email was almost as effective in fooling people compared to a man-made version.

So it's less effective than a regular phishing email?

[-] snooggums@kbin.social 45 points 9 months ago

Yes, but being about the same means ChatGPT could be used to create massive amounts or personalized phishing emails at a low cost in a very short time by automation. Basically doing what they do now, but even faster.

[-] dyathinkhesaurus@lemmy.world 5 points 9 months ago

And with better spelling and punctuation.

[-] snooggums@kbin.social 8 points 9 months ago

No, those 'mistakes' are part of the phishing tactic. It weeds out those that are paying too much attention to the details.

[-] elbarto777@lemmy.world 1 points 9 months ago

Better spelling and punctuation is a bug, not a feature.

Bad spelling = people who miss those may be easy to fool.

[-] afraid_of_zombies@lemmy.world 1 points 9 months ago

I wonder how that would work. The last one I did some checking into had a bitcoin address and it (I really don't understand Bitcoin well) looked like the person moved the fake money from account to account over and over again.

[-] FoundTheVegan@kbin.social 27 points 9 months ago

And crafting a carefully targeted phishing email took a human team around 16 hours, they wrote, while ChatGPT took just minutes

This is significant because any person with the desire to scam can use ChatGPT from the comfort of their own home over lunch instead of hiring professionals for a few days.

[-] dack@lemmy.world 8 points 9 months ago

No, it's significant because attackers can pump out way more emails while also making them customized to their targets and constantly changing to help avoid detectors.

[-] KairuByte@lemmy.dbzer0.com 3 points 9 months ago

You don’t need a professional to write a scam email. You just need common sense, to be honest.

this post was submitted on 28 Oct 2023

258 points (94.2% liked)

Technology

57273 readers

4602 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS