人工智能（AI）的出現(xiàn)已證明其有潛力催化包括加密資產(chǎn)領(lǐng)域在內(nèi)的各個行業(yè)的有益創(chuàng)新。

然而，與任何新興技術(shù)一樣，人們擔(dān)心惡意行為者可能會利用這些進(jìn)步進(jìn)行非法活動，利用炒作、新功能和監(jiān)管漏洞。

認(rèn)識到非法活動的早期跡象對于促進(jìn)可持續(xù)創(chuàng)新和應(yīng)對新興風(fēng)險至關(guān)重要。

雖然人工智能增強(qiáng)的加密犯罪尚未成為普遍威脅，但區(qū)塊鏈分析公司 Elliptic 強(qiáng)調(diào)主動識別和減輕潛在的新興犯罪趨勢以促進(jìn)長期可持續(xù)創(chuàng)新的重要性。

人工智能推動加密犯罪的演變

Elliptic 最近發(fā)布了一篇綜合博客，題為“人工智能加密犯罪的現(xiàn)狀：值得關(guān)注的新興類型和趨勢”，強(qiáng)調(diào)了使用人工智能實(shí)施各種加密犯罪的令人擔(dān)憂的增加。

此外，他們的新地平線掃描報告“加密資產(chǎn)生態(tài)系統(tǒng)中的人工智能犯罪”顯示，加密貨幣生態(tài)系統(tǒng)中的人工智能犯罪仍處于早期階段。

人工智能增強(qiáng)型加密犯罪目前尚未被視為主流威脅，但通過監(jiān)控行為，我們可以領(lǐng)先一步，促進(jìn)長期可持續(xù)創(chuàng)新。

— Elliptic (@elliptic) 2024 年 6 月 10 日

利益相關(guān)者的及時和戰(zhàn)略干預(yù)可以防止這些活動的普遍存在。

Elliptic 高級加密威脅研究員 Arda Akartuna 博士表示：

“[...] 這些趨勢目前還處于相對初級階段，預(yù)防的途徑確實(shí)存在。各行業(yè)的利益相關(guān)者需要齊心協(xié)力，盡早制定最佳實(shí)踐，以免這些趨勢成為主流?！?/p>

報告還指出，與 GPT、OpenAI 和 Bard 等人工智能相關(guān)關(guān)鍵詞相關(guān)的代幣數(shù)量顯著增加，其中約有 4,500 個代幣位于 BNB 智能鏈上。

人工智能驅(qū)動的加密犯罪的出現(xiàn)預(yù)示著網(wǎng)絡(luò)威脅進(jìn)入新階段，因?yàn)?Elliptic 的報告揭露了尖端技術(shù)如何被濫用于深度偽造詐騙、國家支持的攻擊和其他復(fù)雜的非法活動。

Crypto Criminals Go AI: Elliptic Warns of Deepfake Scams & MoreBe aware! Crypto criminals are getting smarter with AI. Stay on top of the latest scams to protect your crypto investments. New report by Elliptic warns crypto crime is entering a new era with the rise of AI. From… pic.twitter.com/V3EZUx8OTb

— CRUXX | Crypto News App (@Coin_CRUXX) June 10, 2024

The report identifies five key typologies of how crypto criminals could leverage AI to augment their criminal endeavors, based on current indicators.

It also underscores the increasing use of generative AI in cryptocurrency scams, identifying it as a critical area where crypto professionals and law enforcement can join forces to combat these emerging threats.

Generative AI: A New Tool for Crypto Scammers

Participants in the cryptocurrency industry are likely familiar with investment scams, many of which now employ deepfakes of celebrities and public figures to promote fraudulent schemes.

Notable individuals such as Elon Musk, former Singaporean Prime Minister Lee Hsien Loong, and the current and former Presidents of Taiwan, Tsai Ing-wen and Lai Ching-te, have been impersonated in these scams.

These promotional deepfakes are commonly disseminated on platforms like TikTok and X.

The report noted:

“Crypto giveaway and doubling scams are increasingly using deepfake videos of crypto CEOs and celebrities to encourage victims to send funds to scam crypto addresses.”

Other scams involve the use of AI to fabricate aspects of a crypto 'business' to enhance its credibility.

In 2022, Binance's former Chief Communications Officer, Patrick Hillmann, was the subject of a deepfake scam where his likeness was used to deceive potential victims within the crypto community.

Patrick Hillmann, CCO at Binance, encourages vigilance against scams after scammers made a deepfake and impersonated him on Zoom calls. pic.twitter.com/NRz4TEM2j3

— Morning Brew ? (@MorningBrew) August 23, 2022

AI can be misused in several ways to make crypto scams and fraudulent activities more persuasive:

-Suggesting celebrity or official endorsement: Deepfakes, as seen with the impersonations of Singaporean and Taiwanese leaders, can falsely suggest that a project has legitimate or official support, thereby increasing its appeal to potential victims.

Former PM Lee warned:

“This is extremely worrying. People watching the video may be fooled into thinking that I really said those words. Please remember, if something sounds too good to be true, do proceed with caution.”

-Streamlining scam operations: Large-scale scams, such as the Sha Zhu Pan ('pig butchering') crypto romance scams originating from Southeast Asia, involve prolonged and intricate communications with victims. There is limited evidence suggesting that these illicit operations are exploring AI to enhance their efficiency.

-Deepfake executive impersonations: A small number of high-profile cases have involved scammers posing as high-level executives during video conferences for corporate espionage or authorising significant transactions. At least one such case targeted the CCO of a major cryptocurrency exchange.

Beware! Crypto scammers hijacked 35+ @YouTube channels, spreading #DeepFake #crypto #scam of @elonmusk. Scammers abuse #SpaceX Starship's 4th flight test, luring victims with double profits. Stay vigilant! pic.twitter.com/SBDpSDDWZ7

— Avast Threat Labs (@AvastThreatLabs) June 6, 2024

-Generating fake marketing materials: AI-generated images and videos can lend an air of legitimacy to scam websites by depicting supposed employees, headquarters, office spaces, and other visuals, creating the illusion of a genuine investment company without revealing the true identities or locations of the scammers.

Fortunately, there are several red flags that can help individuals avoid falling prey to deepfake scams.

To authenticate a video, one can examine the synchronisation of lip movements with speech, the presence of shadows where expected, and the naturalness of facial activities like blinking.

The report stated:

“There are, fortunately, a number of red flag indicators that can help prevent you from falling victim to deepfake scams. To verify the video's authenticity, you can check whether lip movements and voices synchronise, make sure shadows appear where you expect them to, and check that facial activity such as blinking looks natural.”

Spotlight on "AI-Associated" Scams, Tokens, and Market Exploits

Creating a token on many blockchains is a straightforward process, a fact that scammers have exploited to generate hype and inflate token prices before liquidating their holdings for substantial profits.

This action causes prices to plummet, leaving investors with losses and worthless investments in what is known as a "rug-pull."

Additionally, organised groups engage in sudden buying and selling of tokens to profit from market manipulation, commonly referred to as "pump-and-dump" schemes.

Scammers may also hype their tokens by falsely claiming affiliations with major events or companies.

Coin Laundering Process by ChatGPT-related Scammers

AI has been a recent focal point for scam tokens, with hundreds listed on various blockchains containing variations of "GPT" in their names, such as "GPT4 Token," "CryptoGPT," and "GPT Coin."

While some of these tokens may represent legitimate projects, others have been promoted in amateur trading forums by scammers who falsely assert official connections with ChatGPT or other reputable AI entities.

Source: Elliptic

Large Language Models Leveraged in Cyberattacks

Advancements in AI, exemplified by tools like ChatGPT, have sparked a vigorous debate about their potential use in code auditing and bug detection, as well as the risk that malicious hackers could exploit these same capabilities to identify and engineer exploits.

Reports from Microsoft and OpenAI have documented attempts by Russian and North Korean threat actors in this vein, yet white hat hackers argue that the technology is not yet sufficiently advanced for such applications.

ChatGPT and similar mainstream AI tools have improved in recognising and rejecting malicious prompts, prompting cybercriminals to seek out AI services without ethical constraints on dark web forums.

This demand has been met by paid tools such as HackedGPT and WormGPT, which openly advertise their abilities to assist with carding, phishing, malware development, vulnerability scanning, hacking, crafting malicious smart contracts, cyberstalking, harassment, identity theft, disseminating private sensitive material, and other unethical activities for financial gain, whether legal or illegal.

These "unethical GPTs" have garnered mixed reviews from their users, and blockchain analytics platforms possess the capability to trace payments made to their administrators by subscribers.

Increasing Scale of Crypto Scams and Disinformation

Certain crypto scammers may execute a single scam operation and then retire after amassing sufficient illicit funds or once their scheme has been widely exposed.

However, many threat actor groups engage in a pattern of cyclical scamming operations.

They create scam investment, airdrop, or giveaway sites, promote them extensively on social media and messaging apps, and then execute a "rug pull" once the scam nature of their sites becomes a subject of controversy among victims.

The cycle then restarts with a new site and fresh marketing tactics.

Cycling through scam sites can be a resource-intensive process, and some illicit groups are seeking to enhance efficiency through the application of AI.

One scam-as-a-service provider has boasted of using AI to automatically design scam website interfaces, optimised for search engine optimisation (SEO) considerations.

Elliptic investigator shows the cross-chain obfuscation patterns of funds originating from drainer operator wallets

Identity Theft Not Just for Crypto

Identity theft and the creation of false documents are among the most entrenched criminal activities on the dark web.

Cybercrime forums frequently feature advertisements from cybercriminals who pride themselves on their proficiency with photo editing software, offering to produce images of counterfeit passports, ID cards, and utility bills within minutes.

Now, some of these document fabrication services are investigating the use of AI to expand their operations.

One such service, which uses the likeness of Keanu Reeves's John Wick character in its advertising, has both claimed and denied using AI to manipulate images.

Elliptic 已確定用于向該服務(wù)付款的加密貨幣地址，該地址收到的交易足以在短短一個月內(nèi)生成近 5,000 份虛假文件。

網(wǎng)絡(luò)威脅不斷演變，安全網(wǎng)不斷縮小

必須重申的是，人工智能等新興技術(shù)帶來的好處遠(yuǎn)遠(yuǎn)超過其被犯罪分子利用的可能性。

美國負(fù)責(zé)網(wǎng)絡(luò)和新興技術(shù)的副國家安全顧問安妮·紐伯格（Anne Neuberger）深入探討了圍繞人工智能濫用日益加劇的擔(dān)憂。

她強(qiáng)調(diào)，人工智能不僅僅用于常見的詐騙，而且越來越多地被用于復(fù)雜的犯罪活動：

“在眾多暗網(wǎng)網(wǎng)絡(luò)犯罪論壇中，Elliptic 發(fā)現(xiàn)了一些討論，探討如何使用 LLM 對加密錢包種子短語進(jìn)行逆向工程，繞過 OnlyFans 等服務(wù)的身份驗(yàn)證，并提供 DeepNude 等圖像‘脫衣’處理服務(wù)的替代方案。”

人工智能和加密貨幣的交匯既帶來了巨大的機(jī)遇，也帶來了巨大的挑戰(zhàn)。

雖然人工智能可以增強(qiáng)加密領(lǐng)域的安全性和效率，但其被濫用的可能性凸顯了采取戰(zhàn)略性和明智應(yīng)對措施的必要性。

該報告建議采取一套預(yù)防措施，統(tǒng)稱為“DECODE”，即檢測、教育、合作、防御和執(zhí)行。

大多數(shù)威脅仍處于早期階段，通過負(fù)責(zé)任的行業(yè)合作伙伴采取有分寸的早期應(yīng)對措施，可以在其蔓延之前得到有效緩解，并確保人工智能等技術(shù)能夠繼續(xù)可持續(xù)創(chuàng)新。

但隨著網(wǎng)絡(luò)威脅以驚人的速度發(fā)展，安全網(wǎng)進(jìn)一步縮小。

人工智能驅(qū)動的加密犯罪最終會不復(fù)存在嗎？不會。

但我們能做的是，更加了解情況，提高警惕，以減輕風(fēng)險，獲得更好的應(yīng)對機(jī)會。

熱點(diǎn)：人工智能 加密 增加 網(wǎng)絡(luò)