{"id":51404,"date":"2023-04-11T15:04:00","date_gmt":"2023-04-11T15:04:00","guid":{"rendered":"https:\/\/www.darkreading.com\/attacks-breaches\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads"},"modified":"2023-04-11T15:04:00","modified_gmt":"2023-04-11T15:04:00","slug":"attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/","title":{"rendered":"Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/bltdf14941589c199a9\/63c8397b59da50523de43ee4\/chatGPT_Greg_guy_Alamy.jpg\" class=\"ff-og-image-inserted\"><\/div>\n<p>Cybercriminals are posting what appear to be legitimate sponsored ads on hijacked Facebook business and community pages, which&nbsp;promise free downloads of AI chatbots such as ChatGPT and Google Bard. Instead, users download the well-known,&nbsp;<a href=\"https:\/\/www.darkreading.com\/threat-intelligence\/infostealer-malware-market-booms-mfa-fatigue\" target=\"_blank\" rel=\"noopener\">info-stealing malware<\/a>&nbsp;called RedLine Stealer, the researchers have found.<\/p>\n<p>RedLine Stealer is a malware-as-a-service (MaaS) platform sold via online hacker forums that targets browsers to collect various data saved by the user, including credentials and payment-card details, as well as taking a system inventory to assess the attack surface for&nbsp;performing further attacks.&nbsp;It also can perform other malicious functions besides just info stealing, such as uploading and downloading files, and executing commands. This gives attackers, even with limited sophistication, various options for performing a range of cyberattacks, researchers at Veriti&nbsp;said.<\/p>\n<p>They spotted the recent campaign in January, which aims to take advantage of the growing popularity of emerging AI platforms, <a href=\"https:\/\/veriti.ai\/blog\/research\/from-chatgpt-to-redline-stealer-the-dark-side-of-openai-and-google-bard\/\" target=\"_blank\" rel=\"noopener\">according to a report published April 11<\/a>. The researchers then followed the campaign through its peak in March.<\/p>\n<p>&#8220;These posts are designed to appear legitimate, using the buzz around OpenAI language models to trick unsuspecting users into downloading the files,&#8221; Veriti researchers wrote in the report. &#8220;However, once the user downloads and extracts the file, the RedLine Stealer malware is activated and can steal passwords and download further malware onto the user&#8217;s device.&#8221;<\/p>\n<p>The commodity malware is an inspired choice for the campaign considering it costs only $100 to $150 to buy it on the Dark Web, which gives attackers a significant return on investment (ROI) for their cybercriminal activity, the researchers said.<\/p>\n<p>&#8220;In addition, by exploiting Facebook business accounts and their exposed passwords, the attackers were able to target a vast number of users and potentially gain access to sensitive information at a relatively low cost,&#8221; the Veriti research team tells Dark Reading.<\/p>\n<h2 class=\"regular-text\">Dangers of Trojanized AI Apps&nbsp;<\/h2>\n<p>Soon after the <a href=\"https:\/\/www.darkreading.com\/threat-intelligence\/chatgpt-could-create-polymorphic-malware-researchers-warn\" target=\"_blank\" rel=\"noopener\">AI-based chatbot ChatGPT<\/a> came on the scene in November, the chatter began about the various ways attackers can <a href=\"https:\/\/www.darkreading.com\/omdia\/chatgpt-artificial-intelligence-an-upcoming-cybersecurity-threat-\" target=\"_blank\" rel=\"noopener\">exploit it for malicious purposes<\/a>. While some believe that <a href=\"https:\/\/www.darkreading.com\/attacks-breaches\/chatgpt-gut-check-openai-cybersecurity-threat-overhyped\" target=\"_blank\" rel=\"noopener\">this threat is being overhyped<\/a>, the RedLine campaign could be a sign of more related attacks on the horizon.<\/p>\n<p>Rather than taking advantage of AI-based capabilities of the chatbots themselves, the attackers here take advantage of recent developments in the ability to package the AI in various forms, opening the door for creating trojanized downloads.&nbsp;<\/p>\n<p>&#8220;One of the most concerning risks associated with generative AI platforms is the ability to package the AI in a file (e.g., as mobile applications or as open source), which creates the perfect excuse for malicious actors to trick na\u00efve downloaders,&#8221; the researchers explained.&nbsp;<\/p>\n<p>The attackers in this case package RedLine Stealer into&nbsp;an OpenAI or Google Bard downloadable file, leading unsuspecting users to download the malware instead of the promised AI app that lured them to click on the post, the researchers said.<\/p>\n<p>&#8220;The potential impact of such attacks is significant, as hackers could steal confidential data, compromise financial accounts, or even disrupt critical infrastructure,&#8221; they wrote in the report. &#8220;Moreover, <a href=\"https:\/\/www.darkreading.com\/risk\/employees-feeding-sensitive-business-data-chatgpt-raising-security-fears\" target=\"_blank\" rel=\"noopener\">these attacks<\/a> are becoming more sophisticated, making detecting and preventing them harder.&#8221;<\/p>\n<p>Dozens of Facebook business accounts in at least 10 countries already have been hijacked for the purpose of distributing RedLine Stealer through the malicious posts, the researchers said. Greece is the country where attackers reach the highest number of Facebook users, followed by India, the US, Mexico, and Bangladesh, according to the report.<\/p>\n<p>However, the bulk of the campaign&#8217;s &#8220;top attacks&#8221; took place in the US, where 77% of them occurred, according to the report. The country with the next-highest percentage of top attacks was Canada, with 9%, followed by Mexico (6%), India (4%), and Portugal (2%).<\/p>\n<h2 class=\"regular-text\">Protecting the Enterprise From Malicious Downloads<\/h2>\n<p>Veriti recommends a &#8220;comprehensive approach to cybersecurity&#8221; that includes educating employees on the risk of downloading and opening files from unknown sources, alongside &#8220;robust security configurations&#8221; to help avoid compromising enterprise systems if users inadvertently <a href=\"https:\/\/www.darkreading.com\/threat-intelligence\/hot-ticket-aurora-go-based-infostealer-favor-cyber-threat-actors\" target=\"_blank\" rel=\"noopener\">install an infostealer<\/a>, such as Redline, on a corporate desktop.<\/p>\n<p>One of the first steps organizations can take is to limit the download of executables and enforce strict policies that require sandboxing every executable before it is downloaded, the researchers said. &#8220;This can significantly reduce the risk of malicious files infecting a system,&#8221; they tell Dark Reading.<\/p>\n<p>Additionally, disabling data exfiltration can prevent attackers from stealing sensitive information, while enabling anti-malware can detect and remove malicious files before they can cause any damage, the researchers said.<\/p>\n<p>However, researchers note that any measures to educate employees or set policies around files downloaded from the Internet &#8220;should complement an organization&#8217;s existing cybersecurity protections, such as firewalls, intrusion detection and prevention systems, and regular security updates.&#8221;<\/p>\n<p>The team adds,&nbsp;&#8220;Organizations can significantly reduce the likelihood of a successful attack by implementing these best practices and educating employees on the risks.&#8221;<\/p>\n<p>Read More <a href=\"https:\/\/www.darkreading.com\/attacks-breaches\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The campaign shrouds the commodity infostealer in OpenAI files in a play that aims to take advantage of the growing public interest in AI-based chatbots.Read More <a href=\"https:\/\/www.darkreading.com\/attacks-breaches\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\">HERE<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[151],"tags":[],"class_list":["post-51404","post","type-post","status-publish","format-standard","hentry","category-darkreading-ti"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-11T15:04:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/bltdf14941589c199a9\/63c8397b59da50523de43ee4\/chatGPT_Greg_guy_Alamy.jpg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads\",\"datePublished\":\"2023-04-11T15:04:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\\\/\"},\"wordCount\":820,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/bltdf14941589c199a9\\\/63c8397b59da50523de43ee4\\\/chatGPT_Greg_guy_Alamy.jpg\",\"articleSection\":[\"DarkReading |TI\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\\\/\",\"name\":\"Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/bltdf14941589c199a9\\\/63c8397b59da50523de43ee4\\\/chatGPT_Greg_guy_Alamy.jpg\",\"datePublished\":\"2023-04-11T15:04:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\\\/#primaryimage\",\"url\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/bltdf14941589c199a9\\\/63c8397b59da50523de43ee4\\\/chatGPT_Greg_guy_Alamy.jpg\",\"contentUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/bltdf14941589c199a9\\\/63c8397b59da50523de43ee4\\\/chatGPT_Greg_guy_Alamy.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/","og_locale":"en_US","og_type":"article","og_title":"Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2023-04-11T15:04:00+00:00","og_image":[{"url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/bltdf14941589c199a9\/63c8397b59da50523de43ee4\/chatGPT_Greg_guy_Alamy.jpg","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads","datePublished":"2023-04-11T15:04:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/"},"wordCount":820,"commentCount":0,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/bltdf14941589c199a9\/63c8397b59da50523de43ee4\/chatGPT_Greg_guy_Alamy.jpg","articleSection":["DarkReading |TI"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/","url":"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/","name":"Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/bltdf14941589c199a9\/63c8397b59da50523de43ee4\/chatGPT_Greg_guy_Alamy.jpg","datePublished":"2023-04-11T15:04:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/#primaryimage","url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/bltdf14941589c199a9\/63c8397b59da50523de43ee4\/chatGPT_Greg_guy_Alamy.jpg","contentUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/bltdf14941589c199a9\/63c8397b59da50523de43ee4\/chatGPT_Greg_guy_Alamy.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/attackers-hide-redline-stealer-behind-chatgpt-google-bard-facebook-ads\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/51404","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=51404"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/51404\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=51404"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=51404"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=51404"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}