{"id":648703,"date":"2025-01-11T03:20:16","date_gmt":"2025-01-11T00:20:16","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/microsoft-accuses-group-of-developing-tool-to-abuse-its-ai-service-in-new-lawsuit\/"},"modified":"2025-01-11T03:20:16","modified_gmt":"2025-01-11T00:20:16","slug":"microsoft-accuses-group-of-developing-tool-to-abuse-its-ai-service-in-new-lawsuit","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/microsoft-accuses-group-of-developing-tool-to-abuse-its-ai-service-in-new-lawsuit\/","title":{"rendered":"#Microsoft accuses group of developing tool to abuse its AI service in new lawsuit"},"content":{"rendered":"
\n

Microsoft has taken legal action against a group the company claims intentionally developed and used tools to bypass the safety guardrails of its cloud AI products.<\/p>\n

According to a complaint filed by the company<\/a> in December in the U.S. District Court for the Eastern District of Virginia, a group of unnamed 10 defendants allegedly used stolen customer credentials and custom-designed software to break into the Azure OpenAI Service, Microsoft\u2019s fully managed service powered by ChatGPT maker OpenAI\u2019s technologies.<\/p>\n

In the complaint, Microsoft accuses the defendants \u2014 who it refers to only as \u201cDoes,\u201d a legal pseudonym \u2014 of violating the Computer Fraud and Abuse Act, the Digital Millennium Copyright Act, and a federal racketeering law by illicitly accessing and using Microsoft\u2019s software and servers for the purpose to \u201ccreate offensive\u201d and \u201charmful and illicit content.\u201d Microsoft did not provide specific details about the abusive content that was generated.\u00a0<\/p>\n

The company is seeking injunctive and \u201cother equitable\u201d relief and damages.<\/p>\n

In the complaint, Microsoft says it discovered in July 2024 that customers with Azure OpenAI Service credentials \u2014 specifically API keys, the unique strings of characters used to authenticate an app<\/a> or user \u2014 were being used to generate content that violates the service\u2019s acceptable use policy. Subsequently, through an investigation, Microsoft discovered that the API keys had been stolen from paying customers, according to the complaint.<\/p>\n

\u201cThe precise manner in which Defendants obtained all of the API Keys used to carry out the misconduct described in this Complaint is unknown,\u201d Microsoft\u2019s complaint reads, \u201cbut it appears that Defendants have engaged in a pattern of systematic API Key theft that enabled them to steal Microsoft API Keys from multiple Microsoft customers.\u201d<\/p>\n

Microsoft alleges that the defendants used stolen Azure OpenAI Service API keys belonging to U.S.-based customers to create a \u201chacking-as-a-service\u201d scheme. Per the complaint, to pull off this scheme, the defendants created a client-side tool called de3u, as well as software for processing and routing communications from de3u to Microsoft\u2019s systems.<\/p>\n

De3u allowed users to leverage stolen API keys to generate images using DALL-E, one of the OpenAI models available to Azure OpenAI Service customers, without having to write their own code, Microsoft alleges. De3u also attempted to prevent the Azure OpenAI Service from revising the prompts used to generate images, according to the complaint, which can happen, for instance, when a text prompt contains words that trigger Microsoft\u2019s content filtering.<\/p>\n

\"De3u
A screenshot of the De3u tool from the Microsoft complaint.<\/span>Image Credits:<\/strong>Microsoft<\/span><\/figcaption><\/figure>\n

A repo containing de3u project code, hosted on GitHub \u2014 a company that Microsoft owns \u2014 is no longer accessible at press time.<\/p>\n

\u201cThese features, combined with Defendants\u2019 unlawful programmatic API access to the Azure OpenAI service, enabled Defendants to reverse engineer means of circumventing Microsoft\u2019s content and abuse measures,\u201d the complaint reads. \u201cDefendants knowingly and intentionally accessed the Azure OpenAl Service protected computers without authorization, and as a result of such conduct caused damage and loss.\u201d<\/p>\n

In a blog post<\/a> published Friday, Microsoft says that the court has authorized it to seize a website \u201cinstrumental\u201d to the defendants\u2019 operation that will allow the company to gather evidence, decipher how the defendants\u2019 alleged services are monetized, and disrupt any additional technical infrastructure it finds.<\/p>\n

Microsoft also says that it has \u201cput in place countermeasures,\u201d which the company didn\u2019t specify, and \u201cadded additional safety mitigations\u201d to the Azure OpenAI Service targeting the activity it observed.<\/p>\n<\/div>\n

If you liked the article, do not forget to share it with your friends. Follow us on\u00a0Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n

\n

If you want to read more like this article, you can visit our Technology<\/a><\/span> category.<\/strong><\/p>\n<\/blockquote>\n

Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Microsoft has taken legal action against a group the company claims intentionally developed and used tools to bypass the safety guardrails of its cloud AI products. According to a complaint filed by the company in December in the U.S. District Court for the Eastern District of Virginia, a group of unnamed 10 defendants allegedly used…<\/p>\n","protected":false},"author":1,"featured_media":648704,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/microsoft-logo-office.jpg?resize=1200,798","fifu_image_alt":"","footnotes":""},"categories":[18],"tags":[77337,153525,132588,72226,70286,72287],"class_list":["post-648703","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-ai","tag-azure-openai-service","tag-dall-e","tag-lawsuit","tag-microsoft","tag-security"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/648703","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=648703"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/648703\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/648704"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=648703"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=648703"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=648703"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}