OpenAI's New Threat Report is Full of Spies, Scammers, and Spammers

(via theneurondaily.com)
Ever wonder what spies and scammers are doing with ChatGPT?

It’s not just asking for five-paragraph essays, obviously. 

… Here’s the Top 5 Most Interesting Cases…  
OpenAI just dropped a wild new threat report detailing how threat actors from China, Russia, North Korea, and Iran are using its models for everything from cyberattacks to elaborate schemes, and it reads like a new season of Mr. Robot.

The big takeaway: AI is making bad actors more efficient, but it's also making them sloppier. By using ChatGPT, they’re leaving a massive evidence trail that gives OpenAI an unprecedented look inside their playbooks.

1. North Korean-linked actors faked remote job applications. They automated the creation of credible-looking résumés for IT jobs and even used ChatGPT to research how to bypass security in live video interviews using tools like peer-to-peer VPNs and live-feed injectors. 

2. A Chinese operation ran influence campaigns and wrote its own performance reviews. Dubbed “Sneer Review,” this group generated fake comments on TikTok and X to create the illusion of organic debate. The wildest part? They also used ChatGPT to draft their own internal performance reviews, detailing timelines and account maintenance tasks for the operation.

3. A Russian-speaking hacker built malware with a chatbot. In an operation called “ScopeCreep,” an actor used ChatGPT as a coding assistant to iteratively build and debug Windows malware, which was then hidden inside a popular gaming tool.

4. Another Chinese group fueled U.S. political division. “Uncle Spam” generated polarizing content supporting both sides of divisive topics like tariffs. They also used AI image generators to create logos for fake personas, like a “Veterans for Justice” group critical of the current US administration.

5. A Filipino PR firm spammed social media for politicians. “Operation High Five” used AI to generate thousands of pro-government comments on Facebook and TikTok, even creating the nickname “Princess Fiona” to mock a political opponent.

Why this matters: It’s a glimpse into the future of cyber threats and information warfare. AI lowers the barrier to entry, allowing less-skilled actors to create more sophisticated malware and propaganda. A lone wolf can now operate with the efficiency of a small team. This type of information will also likely be used to discredit or outright ban local open-source AI if we’re not careful to defend them (for their positive uses).

Now get this: The very tool these actors use to scale their operations is also their biggest vulnerability. This report shows that monitoring how models are used is one of the most powerful tools we have to fight back. Every prompt, every code snippet they ask for help with, and every error they try to debug is a breadcrumb. They're essentially telling on themselves, giving researchers a real-time feed of their tactics. For now, the spies using AI are also being spied on by AI.

Türkiye: China Is Spying on Uyghurs Using Fake Cell Towers

Turkish intelligence has dismantled a Chinese espionage network operating on its soil. This network had been conducting surveillance on Uyghur refugees as well as Turkish officials using advanced technology, particularly fake mobile towers.

Earlier this month, Turkish intelligence agents arrested seven suspects and discovered their vehicles outfitted with IMSI-catcher devices. These devices, which emulate genuine base stations, can intercept data, call logs, conversations, and other sensitive information from nearby mobile phones.

Intelligence sources indicate that some members of this espionage ring entered Türkiye as recently as March. However, a report last week disclosed that the network has been operational for the previous five years. more

China’s Spy Agency Warns - Foreigners Posing as Scholars, Tourists or ‘Insincere Lovers’

‘Don’t be fooled by sweet talk,’ ministry says in social media post.

Chinese citizens should be on alert for friendly foreign faces who could be spies – from scholars who do not do research and tourists who do not sightsee, to lovers who only want information, the country’s top spy agency has warned.

In a post on its official social media account on Sunday, the Ministry of State Security said foreign spies might be hiding in plain sight, using various identities to carry out activities that threaten China’s national security.

It highlighted five deceptive identities commonly used by foreign spies: tourists who do not sightsee, scholars who conduct no real research, businesspeople who do not do business, investigation consultants who do not investigate, and “insincere lovers” who exploit relationships to gather information. more

A North Korean Agent Applied for a Job - A Halloween Question Tripped Him Up

The hiring team at Kraken, a U.S.-based crypto exchange, noticed immediately that something was off about “Steven Smith,” a would-be IT worker who applied for a software engineering job in early October. 

But it wasn’t until they compared Smith’s email to a list of those suspected to be part of a hacker group that their suspicions were confirmed: Smith was a North Korean operative.

Kraken could have just tossed the application. Instead, Kraken’s chief security officer, Nick Percoco, decided to take a closer look at Steven Smith...

The interview was scheduled for Halloween, a classic American holiday—especially for college students in New York—that Smith seemed to know nothing about.

“Watch out tonight because some people might be ringing your doorbell, kids with chain saws,” Percoco said, referring to the tradition of trick or treating. “What do you do when those people show up?” Smith shrugged and shook his head. “Nothing special,” he said. more

Enjoy the Long Weekend: CIA Officers Reveal Their Top Spy Movies

SPYSCAPE asked real-life CIA officers to pick their all-time favorite spy movies and we’ve got the low-down on 15 of the most realistic and entertaining films of the espionage genre. 

Here are the SPYEX team’s favorite flicks, chosen especially for SPYSCAPE readers! more

1. A Most Wanted Man (2014)

2. Tinker Tailor Soldier Spy (2011)

3. Red Joan (2018)

4. The Little Drummer Girl (1984)‍

5. Argo (2012)

6. Syriana (2005)

7. The Good Shepherd (2006)

8. The Hunt for Red October (1990)

9. Spy (2015)‍

10. Three Days of the Condor (1975)

11. North by Northwest (1959)

12. The Spy Who Came In From the Cold (1965)‍

13. The Amateur (1982)

14. Ill Met By Moonlight, aka Night Ambush (1957)

15. The Third Man (1949)

Not Far from Yoyodyne Propulsion Systems in Grover's Mill, NJ

“Sushi John"-  SPYcy Roll'ed by ICE

An alleged sushi-slinging spy is in ICE custody. 

Ming Xi Zhang, known as “Sushi John,” the 61-year-old owner of Ya Ya Noodles in Montgomery Township, NJ, was arrested March 24 by U.S. Immigration and Customs Enforcement in Newark.

Zhang was convicted in April 2024 of acting as an unregistered agent of the Chinese government and sentenced to three years’ probation. In May 2021, he pleaded guilty to having served as an agent of China in 2016 without notifying the U.S. Attorney General.

ICE says he legally entered the U.S. in 2000 but later “violated the terms of his lawful admission.” more

"Sushi John" + "Ya Ya" = "John Ya Ya" 

One of the 46 Yoyodyne Employees (Red Lectroids)?

We checked. No relation.

The Affidavit of a Rippling Employee Caught Spying for Deel Reads Like a Movie

On Wednesday, Rippling publicly released the affidavit of the Rippling employee who testified that he was working as a spy for the HR tech company’s arch rival Deel.

And the account, coupled with Rippling’s lawsuit filed against Deel a couple of weeks ago, reads like a corporate espionage movie script, complete with a sting operation and a smashed phone.

It’s the latest escapade between the two. TechCrunch has documented the most Hollywood-esque parts of the testimony below, but be aware that this is only one side of the story — the side Rippling wants everyone to know, as its PR machine has blasted it out, and CEO Parker Conrad tweet-stormed about it.

To recap: Rippling, a workforce management platform, very publicly announced on March 17 that it was suing Deel over this alleged spying, leveling charges ranging from violation of the RICO racketeering act (often used to prosecute members of the Mafia) to misappropriation of trade secrets and unfair competition. more

A Chinese Spy Network is Targeting Former US Officials Laid Off by Musk and Trump

A network of companies linked to a Chinese tech firm has been attempting to recruit recently laid-off U.S. government employees. This campaign, uncovered by analyst Max Lesser, seeks to exploit the vulnerabilities of federal workers affected by mass layoffs. 

While the companies involved remain obscure, the operation's methods resemble those used in previous Chinese intelligence activities. The U.S. government is aware of the potential risks and is urging former employees to remain cautious about such offers...

Lesser, who shared his findings with Reuters, warned that "the network seeks to exploit the financial vulnerabilities of former federal workers affected by recent mass layoffs." These recruitment efforts closely resemble previous tactics used by Chinese intelligence to obtain valuable information under the guise of employment opportunities.

A Web of Fake FirmsFour companies—RiverMerge Strategies, Wavemax Innovation, and two others—are allegedly part of this recruitment network. Their websites share overlapping designs, are hosted on the same server, and exhibit other digital connections, raising suspicions of a coordinated effort. Lesser’s research, along with Reuters' investigation, found that all four companies’ websites were hosted alongside Smiao Intelligence, an obscure Chinese internet services firm. more

RIP: Mark Klein, AT&T Tech, NSA Check - 79

Mark Klein, a bona fide hero who risked civil liability and criminal prosecution to help expose a massive spying program that violated the rights of millions of Americans.

Mark didn’t set out to change the world. For 22 years, he was a telecommunications technician for AT&T, most of that in San Francisco. But he always had a strong sense of right and wrong and a commitment to privacy.

Mark not only saw how it works, he had the documents to prove it.

When the New York Times reported in late 2005 that the NSA was engaging in spying inside the U.S., Mark realized that he had witnessed how it was happening. He also realized that the President was not telling Americans the truth about the program. And, though newly retired, he knew that he had to do something. He showed up at EFF’s front door in early 2006 with a simple question: “Do you folks care about privacy?” more

History: Spies and Informants | A 60 Minutes Marathon

From 2017, Scott Pelley’s interview with an FBI undercover agent who infiltrated Al Qaeda and helped thwart several terrorist attacks. 

From 2011, Anderson Cooper’s report on FBI agent Lin Vecchio, who helped put away several notorious Mafia leaders, but also faced murder charges due to his association with an informant. 

From 2017, Sharyn Alfonsi’s report on the use of jailhouse informants in Orange County, California. 

From 2015, Steve Kroft’s report on Jack Barsky, a KGB spy from the Soviet Union who lived for decades in the United States without being detected. 

From 2019, Pelley’s talk with a former American member of Al-Qaeda who provided valuable intelligence in order to avoid jail. 

From 2001, Lesley Stahl’s report on Robert Hanssen, an FBI agent who was convicted of spying for Russia. 

From 2024, Cecilia Vega’s report on the Americans spying for Cuba in the U.S. 

From 2015, Stahl’s investigation into the controversial use of young confidential informants by law enforcement in dangerous and sometimes deadly drug cases. 

From 2010, Pelley’s report on a Defense Department employee caught on tape selling secrets to a Chinese spy. 

From 2022, Jon Wertheim's story on the Ritchie Boys, the secret U.S. unit bolstered by German-born Jews who helped the Allies beat Hitler. 

From 2018, Cooper’s interview with Justice and FBI officials who reveal how they caught a former CIA officer spying for the Chinese. 

And from 2017, Kroft’s interview with British author John Le Carré who has written several best-selling spy thrillers under the pen name David Cornwell. more

Russian Spy Hoarded Surveillance Gadgets - Boasted: Like James Bond Q

A Russian spy was living in a "typical seaside hotel" on the English coast crammed full of electronic surveillance equipment, a court has heard.

Orlin Roussev boasted to his controller that he was becoming like the James Bond character "Q" as he prepared his spying "toys" for kidnap and surveillance operations across Europe...

The Old Bailey was told a "vast" amount of technical equipment for "intrusive surveillance" was found at Roussev's address in Great Yarmouth, Norfolk, which he described in messages as his "Indiana Jones warehouse"... a "significant amount of IT and surveillance equipment". It was stacked up in two storage rooms and an office used by Roussev, the court was told. more

Russian Tanker Suspected of Baltic Sea Sabotage was ‘Loaded with Spy Equipment’

A Russia-linked tanker suspected of cutting Baltic Sea cables has been tugged to port amid reports it was loaded with “spy equipment”.

The vessel is said to have been kitted out with special transmitting and receiving devices that monitor all naval activity, according to shipping journal Lloyd’s List citing a source with direct involvement in the ship. ...The source, who spoke on the condition of anonymity, said the vessel was loaded with “huge portable suitcases” and “many laptops”... 

Those on board the ship would have been aware of the spying activities but would have been “threatened with their life, so everybody kept quiet”, the source told the journal. more

How Pigeons, Cats, Whales, Robotic Catfish Acted as Spies

The death of a spy is rarely newsworthy, due to the secrecy surrounding it. But when a white beluga whale suspected of spying for Moscow was found dead in Norwegian waters in September, the animal soon became a minor celebrity....

The US ran similar experiments with animals, some dating back to the 1960s. One of the CIA’s more unusual attempts to use animals as spies was Operation Acoustic Kitty...

The idea was to implant a microphone and antenna into the cat and use it to eavesdrop on potentially interesting conversations. The test of the “prototype” went horribly wrong... more

Google Warns Millions Of Android Users—These Apps Are Spying On You

Google is narrowing the gap to iPhone on the security and privacy front with Android 15. A raft of welcome changes will better protect users, their devices and their data, including live threat detection to quickly flag malware and permission abuse, cellular network defense, and tighter controls of what apps are doing behind the scenes.

When we talk about permission abuse, we clearly mean the grey area between apps behaving well and outright spyware—of which there’s still plenty on Android. While Apple led the charge to restrict location tracking and access to sensitive phone functions like messaging, cameras and contacts, Google has followed. more

Cautionary Tale for Traveling Executives - A Case of Spy Tradecraft...

A Bulgarian espionage ring working on behalf of Russia in the UK used video-recording spyglasses and honey traps to gather information on journalists and dissidents...

...five Bulgarian nationals who are accused of spying in Britain as part of a ring co-ordinated by Jan Marsalek, the former chief operating officer of Wirecard. 

London’s Old Bailey heard the group targeted journalists Christo Grozev and Roman Dobrokhotov, as well as Kazakh dissident Bergey Ryskaliyev, tracking them variously on flights and across European cities during 2021 and 2022. 

One member of the group, Katrin Ivanova, 33, used specially-designed glasses to record images and videos to watch Grozev on a flight from Vienna to Montenegro in June 2022, prosecutor Alison Morgan KC said. The group had accessed an airline industry database called “Amadeus” through another Bulgarian contact to ascertain the flight details and seat numbers of their targets, the court heard. 

Ivanova also sat nearby Dobrokhotov on a flight in November 2021 and memorised his phone pin code, reporting it back to her handlers, Morgan added. “That was a correct capture and showed the tradecraft of Miss Ivanova,” Morgan told the court. 

The group also discussed bribing hotel staff, employing pickpockets and infiltrating a target’s home by hiring Bulgarian and Romanian cleaning teams, the court heard. more

Bulgarian national Katrin Ivanova (Elizabeth Cook/PA)

and... Russian agent discussed deploying a “true sexy bitch” in a “honeytrap” spy plot against an award-winning journalist, a court has heard...Prosecutor Alison Morgan KC told jurors that, as well as trying to “befriend” Mr Gozev, Gaberova had been engaged in capturing surveillance images of him at the conference...

She said: “These images were extremely important as they showed Christo Grozev together with others of interest to Russia, Eliot Higgins. 

“Roussev would later seek to use face recognition software to check that the image did show Christo Grozev with Higgins together.”...

She showed off her “tradecraft” by relaying images, using covert recording equipment and capturing Mr Dobrokhotov’s iPhone PIN number, Mr Morgan said. more

‘Prison yard’ Surveillance | Lawsuit Alleges Apple Spies on Employee's iPhones

An Apple worker has filed a lawsuit against the company, alleging it spies on its employee’s personal iCloud accounts and iPhones.

As reported by Semafor, the lawsuit filed Sunday claims Apple says it can “engage in physical, video and electronic surveillance” of employees, including accessing data on personal iPhones it “actively encourages” staff to work.

Apple refutes the claims of the lawsuit, which alleges several other employment law violations including free speech suppression and illegal clawback policies. more

Canadian Coach Implicated in Drone-Spying Scandal Resigns Abruptly

John Herdman, the former Canada coach who was implicated in the drone-spying scandal, has abruptly resigned as manager of MLS side Toronto FC.

His reputation has been tarnished somewhat after he was caught up in the investigation into a Canada Soccer staffer spying on their New Zealand opponents with a drone at the 2024 Paris Olympics. The scandal saw head coach Bev Priestman, assistant coach Jasmine Mander and analyst Joey Lombardi all handed a one-year FIFA ban.Emma Hayes fulfills national anthem promise before USWNT vs. England friendly.

Herman denied any wrongdoing in the scandal given his previous role as head coach. He declined to publicly address allegations of a link to a culture of spying within Canada Soccer but maintained his record was clean at the Olympics and World Cups. more

Hvaldimir, a Celebrated ‘Spy’ Whale, Is Found Dead in Norway

The beluga whale, who was first spotted in 2019 wearing what looked like a camera harness, was seen floating in Norwegian waters on Saturday. 

Hvaldimir, a beluga whale who had captured the public’s imagination since 2019 after he was spotted wearing a harness seemingly designed for a camera, was found dead on Saturday in Norway, according to a nonprofit that worked to protect the whale.

Sebastian Strand, the founder of the nonprofit, Marine Mind, said that he saw the dead whale floating near Risavika in southwestern Norway on Saturday afternoon. Its cause of death was not immediately clear, he said. more Previous posts.

Olympics: FIFA Hinders Canada’s chances with Punishments for Drone Spying

FIFA suspended Canada women’s soccer coach Bev Priestman for one year, deducted six points from the team’s Olympic group stage total and issued a fine on Saturday in response to Canada flying a drone over New Zealand’s training sessions before the start of the Games.

The punishment immediately and severely hurt the chances for a second consecutive gold medal for Canada, which won the Olympic tournament in Tokyo in 2021, a run that was immediately questioned as the drone scandal emerged. more

Trinidad and Tobago: Bombshell Report on Elite Spy Unit

An audit into the Strategic Services Agency (SSA), one of key weapons in the state’s arsenal in the fight against crime, found it was being run under the influence of a religious cult comprising highly-trained military operators, armed to the teeth with the latest weaponry, on a treasonous mission to overthrow the Government.

In a bombshell statement in Parliament on July 3, the head of the National Security Council (NSC), Dr Rowley, revealed for the first time details of the audit done by acting director of the SSA retired Brig Gen Anthony Phillips-Spencer, which painted an alarming state of affairs that went undetected for years under the current PNM administration.

The SSA is authorised to intercept communications, phone calls, WhatsApp, e-mails and other modes after obtaining court orders under the Interception of Communication Act. It was first established in 1995 primarily “to guide the formulation and implementation of national policies on illicit trafficking of dangerous drugs and related criminal activities.” more

• Cult infiltrates Trinidad's elite spy agency in shocking coup plot