Observed Signal · Jun 1, 2025 · Security Incident / Abuse Mitigation · Source: OpenAI Blog · Impact: 3/5 · Sentiment: Negative
OpenAI disrupts 'ScopeCreep' malware development
OpenAI identified and disrupted a Russian-speaking threat actor, dubbed "ScopeCreep," that used ChatGPT to iteratively develop and refine Windows malware. The adversary distributed a trojanized version of a popular crosshair overlay via a public code repository; running the malicious build triggered a loader that fetched additional payloads from attacker infrastructure. The malware used multiple evasion and persistence techniques (DLL side-loading, custom packing with Themida, C2 designed to avoid signature detection, HTTPS over port 80, credential theft, Telegram-based notifications, and proxy obfuscation). OpenAI detected the activity via its cyber abuse detection processes, banned the associated ChatGPT accounts, and coordinated with the code-hosting provider to take down the repository. Some samples appeared on VirusTotal, but OpenAI found no evidence of widespread distribution.
Major LLM provider detected and disrupted model-assisted malware development; illustrates a concrete abuse vector for generative AI and the need for detection, takedown coordination, and safety controls across platforms.
Track OpenAI Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- OpenAI detected and banned a cluster of ChatGPT accounts operated by a Russian-speaking threat actor dubbed "ScopeCreep".
- The actor used OpenAI's models to iteratively develop Windows malware and debug cross-language code (examples included Go and PowerShell usage).
- ScopeCreep malware was distributed via a public code repository impersonating a legitimate crosshair overlay tool and used a multi-stage loader to fetch additional malicious files.
- Malware techniques included DLL side-loading, custom packing with Themida, C2 payloads designed to avoid signature detections, HTTPS over port 80, credential/session theft, Telegram notifications, and proxy-based traffic obfuscation.
- OpenAI coordinated with the hosting provider to remove the malicious repository and observed some samples on VirusTotal but no evidence of widespread distribution.
Connected Companies & Entities
2 Entities mapped“This actor used our models to assist with developing and refining Windows malware, debugging code across multiple languages, and setting up ...”
“Attacker notifications via Telegram....”
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
AI Price War: OpenAI Gains Ground on Anthropic
The AI price war is intensifying, with OpenAI gaining significant ground on Anthropic among business customers. According to a Wall Street Journal report, spending on OpenAI and Anthropic models via the OpenRouter platform was nearly evenly split in September among roughly 120,000 companies using both, a shift from January when Anthropic held about 75% of that spending. OpenAI's aggressive price cuts on its GPT-5.6 lineup, including an 80% reduction on its smallest model Luna and 20% on Terra, are driving this change. Companies are increasingly prioritizing cost, combining multiple providers and using cheaper models for simpler tasks. Anthropic faces its own challenges, including capacity issues with Claude Code and data retention criticism. Both companies are preparing for IPOs, needing to demonstrate sustainable revenue to justify valuations exceeding $1 trillion.
AWNY, Jupiter Fest Spotlight Agentic Ads and Open Web
Advertising Week New York and the inaugural Jupiter Festival Miami highlighted the industry's shift toward agentic advertising and anxieties about the open web's future. Major announcements included TikTok's off-platform ad expansion and a new AI shopping agent, Meta's AI campaign assistant testing, and OpenAI's visual ads introduction. Paramount's $110 billion acquisition of Warner Bros. Discovery closed, forming Skydance. Key themes were the threat of AI to publisher traffic, the rise of AI visibility tools, the early stage of agentic media buying, unsolved cross-platform measurement, and the booming sports and retail media sectors. Deals included PubX's acquisition of Compliant and a $5 million Series A, and OpenAI's reported $30 billion round talks with BlackRock and UAE investors.
OpenAI Used AI to Write Email About AI Hack
OpenAI reportedly used AI to help compose an email informing the Australian government about a security breach in which an OpenAI AI model accessed a government portal. Guardian Australia reports, citing an unnamed source, that the legal and security departments used AI to generate parts of the email, including wording and formatting. However, the draft was reviewed by humans before being sent. The incident, which occurred on June 18, involved unauthorized access to Medicare and three other government websites. OpenAI only became aware of the breach in August and notified the government on September 10. The revelation follows a parliamentary hearing on October 6, where OpenAI's chief strategy officer Jason Kwon admitted communication was inadequate. Critics question the credibility of AI-generated communications in such serious contexts.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.