AI 쓰레기 글 범벅된 해커 포럼… 사이버 범죄자들도 분노

Comment Loader Save Story Save this story Comment Loader Save Story Save this story The complaint sounds familiar. “I’m disappointed that you are working to incorporate AI garbage into the site,” one annoyed person, posting anonymously, said in an online message. “No-one is asking for this—we want you to improve the site, stop charging for new features.” Only, this is not a regular internet user moaning about AI being forced into their favorite app . Instead, they are complaining about a cybercrime forum’s plans to introduce more generative AI. Like millions of others, scammers, grifters, and low-level hackers are getting annoyed about AI encroaching into their lives and the rise of low-quality AI slop being posted in their online communities. “People don’t like it,” says Ben Collier, a security researcher and senior lecturer at the University of Edinburgh. As part of a recent study into how low-level cybercriminals are using AI, Collier and fellow researchers spotted an increasing pushback over the use of generative AI in underground cybercrime forums and hacking groups. During the generative AI boom and hype cycles of the past couple of years, some people posting on hacking forums have moved from being positive about how AI can help hacking to a greater skepticism about the technology, according to the study, which also involved researchers from the University of Cambridge and the University of Strathclyde. The researchers analyzed 97,895 AI-related conversations on cybercrime forums since the launch of ChatGPT in 2022 until the end of last year. They found complaints about people dumping “bullet-pointed explainers” of basic cybersecurity concepts, moaning about the number of low quality posts, and concerns about Google’s AI search overviews driving down the number of visitors to the forums. For decades cybercrime message boards and marketplaces, often Russian in origin, have allowed scammers to do business together. They are places where stolen data can be traded, hacking jobs are advertised, and fraudsters shitpost about their rivals. While scammers often try to scam each other , the forums also have a sense of community. For example, users build up reputations for being reliable, and forum owners hold writing competitions . “These are essentially social spaces. They really hate other people using [AI] on the forums,” Collier says. He says the social dynamic of the groups can be messed up by potential cybercriminals trying to gain a better reputation by posting AI-generated hacking explainers. “I think a lot of them are a bit ambivalent about AI because it undermines their claim to be a skilled person.” Posts reviewed by WIRED on Hack Forums, a self-styled space for those interested in talking about hacking and sharing techniques, show an irritation caused by people creating posts with AI. “I see a lot of members using AI for making their threads/posts and it pisses me off since they don’t even take the time to write a simple sentence or two,” one poster wrote. Another put it more bluntly: “Stop posting AI shit.” In several instances, Collier says, users of multiple forums appear to be irritated by AI posts as they want to make friends. “If I wanted to talk to an AI chatbot, there are many websites for me to do so … I come here for human interaction,” one post cited in the research says. Since ChatGPT emerged toward the end of 2022, there has been significant interest in AI-hacking capabilities and how the technology can transform online crime. Both sophisticated hackers and those less capable have been trying to use AI in their attacks. While some organized fraudsters have boosted their operations with ever-more realistic AI face-swapping technology and social engineering messages translated using AI , a lot of attention has been on generative AI’s capabilities to write malicious code and discover vulnerabilities . “More sophisticated threat actors are aware of the shortfalls of commercial models that have guardrails, and they know ways to jailbreak those prompts,” says Ian Gray, vice president of intelligence at the security company Flashpoint, referring to the safety mechanisms put in place by OpenAI , Anthropic , and Google . “They’re also cautious of AI-generated projects in forums or marketplaces—there are weaknesses and vulnerabilities, sometimes exposing the underlying infrastructure,” Gray says. Flashpoint has seen hackers recently talking about the potential capabilities of Claude Mythos Preview , Anthropic’s latest frontier AI model, which has thrown some in the cybersecurity industry into a panic . Some cybercriminals have also disparaged others for allegedly using AI in their hacking operations—“all they can do is use AI,” one group said, according to Flashpoint’s analysis. Collier says that so far, among the lower-level cybercriminals that his study tracked—not sophisticated or nation-state-backed hackers—there hasn’t been any obvious signs of “real disruption” caused by AI. “It has not significantly reduced the skill barrier to entry, nor has it led to serious disruptions to established business models or practices,” the study says. “Instead, its main impact has been on already highly automated areas such as SEO fraud, social media bots, and some forms of romance scam.” Despite the frosty reception of AI being used on cybercrime forums, others see potential. Some posters on Hack Forums have said they would perhaps welcome an AI assistant that would “help” them structure their posts and improve grammar, but they draw the line at an AI that can fully post for them. “An AI generator for posts would turn this into a clanker forum of AI's talking to each other,” one person wrote. Meanwhile, Flashpoint researchers have spotted hackers discussing the idea of building an “AI-enhanced” cybercrime market, which was touted as a way to help people to buy stolen data and online accounts more quickly. Not everyone was on board. As one person wrote, “IT’S A STUPID FUCKING IDEA TO PUT AI INTO YOUR MARKET.”