Security Tips when using Artificial Intelligence (AI) Tools

The artificial intelligence (AI) tools have widely drawn users’ attention since ChatGPT launched in Nov 2022.  While the applicability of AI is improving our work or life, there may have criminals who used the AI tools to trick users into downloading malware or sharing sensitive information.  Therefore, the potential security issues cannot be ignored.

Security Tips for using AI Tools :

1. Use a trusted AI tool:
   Access the AI tools only through their official channel.  Install applications only from official apps stores and from a reputable publisher.
2. Use unique and strong password:
   If you are using an account to access the AI tools, make sure that you are using an unique and strong password.  Avoid using the same password for multiple accounts and enable two-factor authentication whenever possible.
3. Be cautious of phishing attempts:
   Cyber criminals may attempt to make use of the AI tools to impersonate and steal personal information.  Always verify that you are interacting with the legitimate AI tools and avoid clicking on any suspicious links or downloading any attachments.
4. Keep your OS and software up-to-date:
   Always keep your operating system, applications and antivirus software up-to-date with the latest security patches to prevent vulnerabilities that could be exploited by cyber criminals.
5. Use a secure network:
   Avoid using public Wi-Fi or other unsecured networks when accessing the AI tools.  Instead, use a secure Wi-Fi network or a VPN to protect your internet connection.
6. Don’t share personal or sensitive information:
   Avoid sharing any sensitive or confidential information, such as name, address, phone, passwords, personal identification or social security number, or financial information, etc. with the AI tools.
7. Clear your browser history:
   After using AI tools, clear your browser history, cache, and cookies to remove any traces of your records or conversation.
8. Limit your use of AI tools:
   While AI tools are great tools, it’s best to limit your use of it to avoid giving away too much information about yourself.
9. Validate the outputs generate by AI tools:
   Validation on the outputs generated by AI tools is recommended since the results provided by AI tools may not accurate enough.  Application developers should also double-check the programming code generated or reviewed by the AI tools, make sure no malicious code is inserted and avoid security breaches.

Overall, it’s important to stay vigilant when interacting with any artificial intelligence assistants.  It’s always recommended to take precautions to protect your privacy and reduce the risk of cyberattacks.

Reference:

• HKCERT: Verify from Various Sources to Ensure Security When Searching for Answers with AI
  (https://www.hkcert.org/blog/verify-from-various-sources-to-ensure-security-when-searching-for-answers-with-ai)
• HKCERT: Adopt Good Cyber Security Practices to Make AI Your Friends not Foes
  (https://www.hkcert.org/blog/adopt-good-cyber-security-practices-to-make-ai-your-friends-not-foes)
• HKCERT: Beware of Fake ChatGPT Apps and Phishing Websites
  (https://www.hkcert.org/blog/hkcert-security-tips-beware-of-fake-chatgpt-apps-and-phishing-websites)
• Kaspersky: “Fobo” Trojan distributed as ChatGPT client for Windows
  (https://www.kaspersky.com/blog/chatgpt-stealer-win-client/47274/)

Published on:  Apr 2023