6OpenAI Blog·
OpenAI bans accounts linked to deceptive AI-assisted fake IT worker employment scheme
OpenAI banned accounts associated with suspected deceptive employment campaigns that used AI tools to generate materials for fraudulent remote-job applications. The operation appears connected to the broader pattern of North Korean-linked IT worker schemes that have targeted Western companies. OpenAI's disclosure is a primary-source safety enforcement action documenting a novel misuse vector.
Related guides (2)
Related events (8)
OpenAI bans accounts linked to North Korea-style deceptive IT-worker employment scheme
OpenAI banned accounts suspected of facilitating a deceptive employment scheme bearing characteristics of publicly reported North Korea-linked IT-worker activity. The operation appears to involve using AI tools to support fraudulent job applications or remote work impersonation. This is a concrete enforcement action by a major AI lab against state-linked misuse of AI systems.
OpenAI bans accounts used in AI-assisted fake-review job scams originating from Cambodia
OpenAI identified and banned accounts apparently originating in Cambodia that were using AI to translate messages as part of fake-review job scams. The scams solicited victims to pay fees under the guise of employment. This is a primary-source disclosure from OpenAI about a concrete misuse disruption action.
OpenAI bans accounts linked to AI-assisted online fraud and scam networks
OpenAI identified and banned accounts associated with online fraud networks that were using its models to generate scam scripts, impersonate individuals, translate content, and engage with victims. The action is part of OpenAI's ongoing effort to disrupt malicious uses of AI. This represents a concrete enforcement case documenting how threat actors are operationalizing LLMs for fraud at scale.
OpenAI bans accounts linked to Russian-speaking criminal groups building AI-assisted malware
OpenAI identified and banned accounts likely associated with Russian-speaking criminal groups that were using AI to develop malware loaders, evasion layers, credential-theft scripts, and command-and-control infrastructure. The action is part of OpenAI's ongoing effort to disrupt malicious uses of its platform. This case documents a concrete instance of threat actors operationalizing frontier AI for offensive cyber tooling.
OpenAI bans accounts linked to PRC-affiliated threat groups using AI for phishing and scripting
OpenAI terminated accounts whose activity overlapped with publicly reported threat groups displaying hallmarks consistent with PRC intelligence requirements. The banned accounts were using AI to support phishing campaigns and scripting workflows. This is part of OpenAI's ongoing effort to detect and disrupt malicious use of its platform by state-affiliated actors.
OpenAI bans Cambodia-linked accounts used in AI-assisted task scams targeting UK users
OpenAI identified and banned accounts likely originating in Cambodia that were using AI tools to support scam workflows targeting people in the United Kingdom. The operation, dubbed 'Wrong Number,' represents a documented case of AI being weaponized for fraud at scale. This is a primary-source disclosure from OpenAI about adversarial misuse of their platform.
OpenAI bans DPRK-affiliated accounts using AI for cyber intrusion research
OpenAI terminated accounts potentially linked to North Korea-affiliated threat actors who were using AI to research intrusion tooling, phishing campaigns, malware development, and cryptocurrency targeting. The action is part of OpenAI's ongoing effort to disrupt malicious uses of its platform by state-affiliated actors. This represents a concrete case of AI being weaponized for offensive cyber operations by a nation-state actor.
OpenAI bans accounts using AI to generate anti-corruption criticism targeting Russian foundation
OpenAI identified and banned accounts that were using its AI systems to generate comments criticizing a Russian anti-corruption foundation and associated figures. The operation represents a documented case of AI-enabled influence operations being disrupted by a frontier lab. This is relevant to AI misuse tracking and platform safety enforcement.