2024-03 · 2024-Q1
OpenAI Compromised Credentials on Dark Web
Outside the model: Resource theftAgent tooling was not the attack surface, so no layer applies.
- Fixable
- Architectural
- Vendor response
- Unknown
- In the wild
- Yes
- Actor
- Not applicable
Target
OpenAI ChatGPT users
Impact
225,000+ compromised credentials for sale; 130K+ unique hosts infiltrated
Root cause
LummaC2, Raccoon, and RedLine infostealer malware on user devices
Sources
Catalog
Cite this: AgentProv incident record: OpenAI Compromised Credentials on Dark Web (2024-03). https://agentprov.com/incidents/2024-03-openai-compromised-credentials-on-dark-web