Account Takeover
Account Takeover (ATO) is a cybersecurity attack in which an adversary gains and controls unauthorized access to another person's account. Common techniques include credential stuffing, phishing, and social engineering.
Timeline (last 90 days)
After an account is maliciously taken over, the attacker can read historical conversations and may initiate new interactions as the user to conduct social engineering attacks or abuse the service.
If the account is bound to payment information, account takeover may also cause financial losses.
Account Takeover (ATO) is a classic attack type in the cybersecurity field, referring to an attacker gaining unauthorized access to and control of another person's account through means such as credential theft, session hijacking, credential stuffing or phishing.
In large language model services, the consequences of ATO take on new particularities: attackers can read historical conversations (which may contain code, documents, trade secrets, personal privacy), can call the model API as the victim to consume quota or trigger charges, and can even exploit the model's "memory" feature to poison the context.
Most AI chat products retain conversation history long-term by default, which means the dwell time of ATO is often longer and detection is harder.
All Facts (5)
After an account is maliciously taken over, the attacker can read historical conversations and may initiate new interactions as the user to conduct social engineering attacks or abuse the service.
50%UnverifiedIf the account is bound to payment information, account takeover may also cause financial losses.
50%UnverifiedAccount Takeover (ATO) is a classic attack type in the cybersecurity field, referring to an attacker gaining unauthorized access to and control of another person's account through means such as credential theft, session hijacking, credential stuffing or phishing.
50%UnverifiedIn large language model services, the consequences of ATO take on new particularities: attackers can read historical conversations (which may contain code, documents, trade secrets, personal privacy), can call the model API as the victim to consume quota or trigger charges, and can even exploit the model's "memory" feature to poison the context.
50%UnverifiedMost AI chat products retain conversation history long-term by default, which means the dwell time of ATO is often longer and detection is harder.
50%