DISRUPTING A GLOBAL CYBERCRIME NETWORK ABUSING GENERATIVE AI

Summary from the TLDR InfoSec newsletter

Microsoft has named four individuals against whom it is taking legal action for abusing Azure OpenAI services to create harmful content. Members of the Storm-2139 APT group exploited exposed customer credentials scraped from public sources to unlawfully access accounts with certain generative AI services. Upon publication of the report, the cybercriminals doxed Microsoft's counsel of record, and some suspected cybercriminals sent emails to the counsel.