STORM-0817 (Iran) — used ChatGPT to debug Android surveillanceware
Date: 2024-10
Affected: OpenAI ChatGPT; Android targets (Iranian dissidents, Pakistani officials)
Attack vector: tool-abuse
Category: threat-report
Severity: High

Iran-based STORM-0817 used ChatGPT to debug Android malware that exfiltrates contacts, call logs, screenshots, browsing history and location. The actor researched Instagram followers of an Iranian dissident journalist and translated LinkedIn profiles of Pakistani cyber-security officials.


Mitigations:

Architectural layers (MAESTRO):