|
Hey there, here's a wild one from Matthew: Hackers are attempting to extort a website for artists, threatening them with feeding their art into AI training datasets. It's a sensitive topic for many artists, one expert told 404 Media. An old school ransomware attack has a new twist: threatening to feed data to AI companies so it’ll be added to LLM datasets.
|
|
|
|
|
Protect your digital life from phishing attacks. The YubiKey by Yubico is a physical security key that locks down your personal and business accounts across devices. Unlike other multi-factor authentication (MFA), it requires a physical tap to verify your login—shutting hackers out, even if they have your password. It safeguards against AI-powered cyberattacks, phishing, online identity scams, and account takeovers. YubiKeys secure over 1,000 accounts including email, social, password managers, productivity tools, developer tools, and more. YubiKeys are securely manufactured in Sweden and programmed in the USA. For a limited time, get $10 off your order of exactly two keys from the YubiKey 5 Series or Security Key Series using the code “404media10” at checkout. Still undefeated. YubiKey is the original passkey. Learn more and get $10 off at yubico.com/404media
|
|
|
|
Artists&Clients is a website that connects independent artists with interested clients. Around August 30, a message appeared on Artists&Clients attributed to the ransomware group LunaLock. “We have breached the website Artists&Clients to steal and encrypt all its data,” the message on the site said, according to screenshots taken before the site went down on Tuesday. “If you are a user of this website, you are urged to contact the owners and insist that they pay our ransom. If this ransom is not paid, we will release all data publicly on this Tor site, including source code and personal data of users. Additionally, we will submit all artwork to AI companies to be added to training datasets.” LunaLock promised to delete the stolen data and allow users to decrypt their files if the site’s owner paid a $50,000 ransom. “Payment is accepted in either Bitcoin or Monero,” the notice put on the site by the hackers said. The ransom note included a countdown timer that gave the site’s owners several days to cough up the cash. “If you do not pay, all files will be leaked, including personal user data. This may cause you to be subject to fines and penalties under the GDPR and other laws.” Most of LunaLock’s threat is standard language for a ransomware attack. What’s new is the explicit threat to give the site’s data—which includes the unique artwork and information of its users—to AI companies. “This is the first time I see a threat actor use training AI models as part of their extortion tactic,” Tammy Harper, a senior threat intelligence researcher at the cyber security company Flare, told 404 Media. “Before this it was kind of an assumption that victim data could end up being shared through AI models. Especially if the groups use it to find leverage and process the data to calculate ransom amounts.” Harper said that this kind of threat could be effective against artists. “It’s a very sensitive subject for this type of victim (an art marketplace.) LunaLock is definitely using and hoping for the clients and artists of the victim to pressure them into paying the ransom.” It’s unclear how LunaLock would get the artistic data to AI companiesOf course, it might be as simple as setting up an independent website full of the data on the open web and waiting for one of the LLMs crawlers to come and devour the information. Or just starting a chat with the companies’ respective chatbots and uploading the images, depending on each company’s policy on how they train their AIs based on user uploads. As of this writing, Artists&Clients is down and attempts to reach it trigger a Cloudflare error. But users and cyber security accounts are sharing screenshots of the ransomware note on social media. Google also indexed the ransom note and as of writing, it appears in the description of the site when you look it up in the search engine. Artists&Clients did not respond to 404 Media’s request for a comment.
|
