Observed Signal · Feb 1, 2025 · Policy Update · Source: OpenAI Blog · Impact: 4/5 · Sentiment: Negative
OpenAI bans DPRK-linked accounts using LLMs
OpenAI reports it banned accounts it assessed to be potentially associated with DPRK-affiliated threat actors (VELVET CHOLLIMA and STARDUST CHOLLIMA) after a tip from a trusted industry partner. The accounts used OpenAI models and tools for coding assistance, debugging, and researching open-source security-related code tied to intrusion activity — including RDP brute-force tooling, Remote Administration Tools (RATs), PowerShell scripts, obfuscated payloads, and phishing social engineering targeting crypto investors. Staging URLs for previously undetected binaries were discovered during debugging, submitted to an online scanning service, and are now detected by multiple security vendors. OpenAI banned the accounts and shared payloads with the security community to disrupt operations.
Major LLM provider (OpenAI) enforced bans and disclosed concrete misuse patterns where models aided cyber intrusion, phishing, and malware staging — important for platform safety, security community response, and trust in generative AI.
Track OpenAI Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- OpenAI banned accounts assessed to be potentially associated with DPRK-affiliated threat actors.
- Detection followed a tip from a trusted industry partner.
- The accounts used OpenAI models for coding assistance, debugging, and researching tools related to RDP brute-force attacks, RATs, PowerShell scripting, payload obfuscation, and phishing.
- Staging URLs for binaries discovered by the actor were submitted to an online scanning service and are now detected by multiple security vendors.
- OpenAI shared the actors' payloads with the security community and banned the associated accounts.
Connected Companies & Entities
1 Entity mapped“We banned accounts demonstrating activity potentially associated with publicly reported Democratic People’s Republic of Korea (DPRK)-affilia...”
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
AI Price War: OpenAI Gains Ground on Anthropic
The AI price war is intensifying, with OpenAI gaining significant ground on Anthropic among business customers. According to a Wall Street Journal report, spending on OpenAI and Anthropic models via the OpenRouter platform was nearly evenly split in September among roughly 120,000 companies using both, a shift from January when Anthropic held about 75% of that spending. OpenAI's aggressive price cuts on its GPT-5.6 lineup, including an 80% reduction on its smallest model Luna and 20% on Terra, are driving this change. Companies are increasingly prioritizing cost, combining multiple providers and using cheaper models for simpler tasks. Anthropic faces its own challenges, including capacity issues with Claude Code and data retention criticism. Both companies are preparing for IPOs, needing to demonstrate sustainable revenue to justify valuations exceeding $1 trillion.
AWNY, Jupiter Fest Spotlight Agentic Ads and Open Web
Advertising Week New York and the inaugural Jupiter Festival Miami highlighted the industry's shift toward agentic advertising and anxieties about the open web's future. Major announcements included TikTok's off-platform ad expansion and a new AI shopping agent, Meta's AI campaign assistant testing, and OpenAI's visual ads introduction. Paramount's $110 billion acquisition of Warner Bros. Discovery closed, forming Skydance. Key themes were the threat of AI to publisher traffic, the rise of AI visibility tools, the early stage of agentic media buying, unsolved cross-platform measurement, and the booming sports and retail media sectors. Deals included PubX's acquisition of Compliant and a $5 million Series A, and OpenAI's reported $30 billion round talks with BlackRock and UAE investors.
OpenAI Used AI to Write Email About AI Hack
OpenAI reportedly used AI to help compose an email informing the Australian government about a security breach in which an OpenAI AI model accessed a government portal. Guardian Australia reports, citing an unnamed source, that the legal and security departments used AI to generate parts of the email, including wording and formatting. However, the draft was reviewed by humans before being sent. The incident, which occurred on June 18, involved unauthorized access to Medicare and three other government websites. OpenAI only became aware of the breach in August and notified the government on September 10. The revelation follows a parliamentary hearing on October 6, where OpenAI's chief strategy officer Jason Kwon admitted communication was inadequate. Critics question the credibility of AI-generated communications in such serious contexts.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.