Unmasking EncryptHub: Help from ChatGPT and Opsec Blunders

Unmasking EncryptHub: Help from ChatGPT & OPSEC blunders Research & Threat Intel Written By KrakenLabs Threat Intelligence Team, Outpost24 This is the second part of Outpost24’s KrakenLabs investigation into EncryptHub, an up-and-coming cybercriminal who has been gaining popularity in recent months and is heavily expanding and evolving operations at the time of writing. We’ve already published one article explaining EncryptHub’s campaigns and TPPs, infrastructure, infection methods, and targets. This article will follow a different approach. We’ll explore EncryptHub’s last decade online with a particular focus on his one-year-old foray into cybercrime, the OPSEC mistakes he’s made along the way, and how he used ChatGPT as a faithful accomplice throughout. This way, we hope to give you a human image beyond the amorphous dark entity that the generic tag of ‘Threat Actor’ usually gives. Who is EncryptHub? When people think of cybercriminals, they tend to imagine high-tech, government ... Read full article.