Malicious ChatGPT Apps Take Over Android Devices

Malicious ChatGPT apps that target Android devices have been reported by researchers.

Researchers have reported a recent rash of malicious ChatGPT apps that target Android devices. These programs, which pose as official ChatGPT apps, can hijack devices and collect private information, such as passwords, credit card numbers, and contact details. The harmful programs are often available on unofficial app stores and are frequently advertised online and on social media. Once loaded, the apps can remotely manage the smartphone, send spam messages, and steal personal information from the device.

A malicious copy of the well-known ChatGPT program has been discovered on the Google Play Store. The "ChatGPT AI Chatbot" app seems to be a genuine ChatGPT app but is a Trojan horse that can access Android devices and collect user data. Palo Alto Networks Unit 42 researchers were the ones to discover the app first. When the app is installed, the researchers found that it asks for access to the device's contacts, call logs, SMS messages, and location information, among other risky permissions. Additionally, the program requests permission to install other apps on the smartphone, enabling the attacker to add more malware.

An attacker can use the malicious ChatGPT program to steal personal information, including passwords, credit card numbers, and contact details, if a user installs it. The attacker might use the program to access the victim's device and transmit spam, set up other malware, or even steal the victim's identity.

Since then, Google has eliminated the harmful ChatGPT app from the Google Play Store. Users who have already downloaded the app should quickly remove it. You can check your device's permissions to see if the app has been given access to your contacts, call logs, SMS messages, or location data if you are unsure whether you have installed the malicious ChatGPT app.