STORM-0817

OpenAI bans Iran-linked STORM-0817 accounts using AI for malware development and scraping

OpenAI identified and banned accounts linked to the Iran-affiliated threat actor STORM-0817, which was using OpenAI's models to debug Android malware, scrape social media platforms, and translate offensive tooling. The disclosure is part of OpenAI's ongoing threat intelligence reporting on state-linked misuse of AI systems. This case illustrates concrete adversarial use of frontier AI for cyberoffense and surveillance tooling.