OpenAI Blog
Oct 1, 2024
Operation “STORM-2035”: Iran-origin influence activity
OpenAI banned Iran-origin STORM-2035 accounts using AI to generate US and UK election content and publish it across sites.
STORM-0817: Iran-linked malware and scraping activity
OpenAI banned Iran-linked STORM-0817 accounts using AI to debug Android malware, scrape social platforms, and translate tooling.
Related stories
OpenAI Blog
Feb 1, 2025
Iranian influence nexus: Cross-platform activity
OpenAI banned Iran-linked accounts using AI to generate articles and social posts tied to IUVM and STORM-2035 influence activity.
OpenAI Blog
Jun 1, 2025
STORM-2035: Recidivist influence activity
OpenAI banned accounts associated with the likely Iran-linked STORM-2035 operation using AI to create influence content about US, UK, Irish, and Venezuelan politics.
OpenAI Blog
May 1, 2024
IUVM: Iran-linked influence content network
OpenAI banned accounts associated with the Iran-origin operation "IUVM", using AI to generate and translate pro-Iran, anti-Israel and anti-US website content.
OpenAI Blog
Jun 1, 2025
Operation “ScopeCreep”: Russian-speaking malware development
OpenAI banned Russian-language accounts using AI to build malware, refine loaders, and troubleshoot cyber tooling.
OpenAI Blog
Oct 1, 2024
CyberAv3ngers: Iran-linked cyber research activity
OpenAI banned accounts that appeared to belong to CyberAv3ngers using AI to research industrial control systems, default credentials, and targets.
OpenAI Blog
Oct 1, 2025
Cyber Operation: Russian-speaking malware tooling
OpenAI banned accounts likely linked to Russian-speaking criminal groups, using AI to build malware loaders, evasion layers, credential-theft scripts, and C2 infrastructure.
OpenAI Blog
Oct 1, 2025
Cyber Operation: Korean-language malware support
OpenAI banned Korean-language accounts using AI for malware development support, debugging, phishing, and credential-theft workflows.
OpenAI Blog
Jun 1, 2025
Vixen and Keyhole Panda: China-linked cyber operations
OpenAI banned accounts associated with threat actors publicly attributed to the PRC, using AI to support vulnerability research, scripting, translation, and operational troubleshooting.
OpenAI Blog
Oct 1, 2024
Tort Report: Abusive reporting activity
OpenAI banned accounts using AI to draft abusive reports and complaints targeting Vietnamese public figures and platforms.
OpenAI Blog
Oct 1, 2024
SweetSpecter: China-linked cyber activity
OpenAI banned accounts likely belonging to a suspected China-based adversary tracked as SweetSpecter, using AI to research vulnerabilities, write code, and support spear-phishing activity.
OpenAI Blog
May 1, 2024
Operation "Zero Zeno": Israel-linked influence activity
OpenAI banned accounts linked to a previously unreprorted Israel-origin operation we dubbed “Zero Zeno,” using AI to generate anti-Hamas, anti-Qatar, pro-Israel, anti-BJP, and pro-Histadrut content.