editor ’ s question

t ’ s not surprising that

Europol has issued a new report warning organisations and consumers about the risks associated with ChatGPT , as the tool has the potential to completely reform the phishing world , in favour of the bad guys .

When criminals use ChatGPT , there are no language or culture barriers . They can prompt the application to gather information about organisations , the events they take part in , the companies they work with , at phenomenal speed . They can then prompt ChatGPT to use this information to write highly credible scam emails . When the target receives an email from their ‘ apparent ’ bank , CEO or supplier , there are no language telltale signs the email is bogus . The tone , context and reason to carry out the bank transfer give no evidence to suggest the email is a scam . This makes ChatGPTgenerated phishing emails very difficult to spot and dangerous .

When it comes to protecting against ChatGPT phishing scams , users must be wary of links received in emails . If an email arrives with a link , never click on the link . As a habit , verify its authenticity first . For example , if your bank calls you asking for personal information , hang up and call back the bank via the phone number found on their website .

Furthermore , never use just one root password , even with variations , such as JohnSmith1 , John $ mith1 !, Johnsmith2 , to protect all your online accounts . If one password is phished , criminals can find its variations and access everything . The same threat applies when using password managers . Because all your passwords are saved behind one single

password , the risk of losing everything is even higher . If that master password is phished , criminals can open all your accounts at once .

Instead , users should think of passwords the same way as keys to their house , office or car . They don ’ t need to know the grooves or make their own keys . They just need to find the right key or password to use it . The easiest way is to use tools to generate strong unique passwords like ‘ 7D £ bShX *# Wbqj-2-

JULIA O ’ TOOLE , CEO OF MYCENA SECURITY SOLUTIONS

CiQS ’ or ‘ kkQO _ 5 * Qy * h89D @ h ’ but don ’ t centralise them behind a master key or identity . That way , passwords can be generated , impossible to break and changed at will , without the risk of a single point of failure , so that in case one password is phished because of a ChatGPT-generated email , it will only impact one online account . u

30 www . intelligentciso . com