ZeroFox Intelligence Flash Report - Malicious AI-Enhanced Bot Announced for Sale

In this flash report, ZeroFox researchers report on a new AI-enhanced bot announced for sale in the deep and dark web forum, Exploit.

Standing Intelligence Requirements

Deep Dark Web and Criminal Underground DDW

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

View the full report here

On May 6, 2024, untested threat actor “Average” started a thread in the Russian-speaking deep and dark web (DDW) community Exploit, advertising the development of a new artificial intelligence (AI)-powered one-time password (OTP) bot that can be leveraged in two-factor authentication (2FA) bypass attacks, as well as other social engineering activity.
As of May 10, 2024, the bot is allegedly available for pre-order at a cost of USD 150, though the release date is unknown. Average claims that up to three “investors” are also needed, whose funds will assist in the tool’s development. Investors will also receive access to a beta version of the bot, as well as “lifetime service.”
The advertisement of this bot is almost certainly indicative of a growing interest in unrestricted AI tools within both DDW communities and open web communities. Throughout 2024, threat actors of varied motives and capabilities are very likely to increasingly seek tools able to enhance their ability to conduct malicious cyber activity.