You can follow cliche advice on how to get rich — invest young, live below your means, etc. — or you can follow ours: Go stroll through a cornfield. Someone in Kentucky did just that and found 700+ Civil War-era gold coins, a collection that may be worth $1m+ and that already has a nickname in the coin community: the Great Kentucky Hoard.
In today’s email:
WormGPT: Introducing the Wario to ChatGPT’s Mario.
Sound thinking: How a good sonic brand sticks in our minds.
Grimace Shake: What memes mean for brands like McDonald’s.
Around the Web: Measuring with corgis, AI ethics, a bunch of calculators, and more.
👇 Listen: When a chatbot has “no ethical boundaries or limitations.”
The big idea
WormGPT is ChatGPT, but evil — how much should it worry you?
It’s a great day to start the war against chatbots designed to help cybercriminals.
2023-07-19T00:00:00Z
Ben Berkley
You know the trope: Something fishy’s going on with the protagonist, and here comes that tired twist — there’s an evil twin.
Gasp. So surprising.
This latest evil twin reveal will surprise nobody, but it’s pretty jarring all the same — ChatGPT has an evil twin that caters to cybercriminals.
WormGPT…
… was created by an unknown hacker and launched last month, with its designer calling it ChatGPT’s “biggest enemy.”
OpenAI built ethical guardrails into ChatGPT to prevent malicious activities; WormGPT has none of that.
This huge jerk of a chatbot proudly “lets you do all sorts of illegal stuff,” perPCMag.
Its primary purpose: generating convincing business email compromise (BEC) attacks, which use fake, personalized messages to access sensitive accounts.
SlashNext found the tool produced “sophisticated” phishing emails that were “remarkably persuasive” and “strategically cunning” with commendable grammar.
It also confirmed WormGPT has “no ethical boundaries or limitations.”
Like ChatGPT, the tool is easy to use, meaning cybercriminals with limited experience could find success with it.
… so, that all sucks.
But let’s keep those worries in check?
Unlike its more responsible sibling, WormGPT isn’t free: Access costs ~$617/year, limiting adoption.
Also slowing its growth: bad word-of-mouth. One buyer on the hacker forum where WormGPT is sold said it’s “not worth any dime.”
And while smarter BEC attacks present a challenge, their threat is nothing new — a leading cybercrime that cost victims $2.4B worldwide in 2021, BEC attacks are already a focus for cybersecurity experts.
Want to prepare yourself? The FBI offers tips on safeguarding accounts.
For now, WormGPT is less an active concern and more a sign of the looming fights ahead as AI increasingly gets in the hands of bad actors.
TRENDING
Pinkydoll, the viral TikToker who acts like a video game NPC, toldMotherboard she makes $7k+ per day. Considering she streams for six hours daily, that’s ~$1.1k+ per hour for saying things like “Mmm, ice cream so good” while popping single kernels of popcorn with a flat iron.
SNIPPETS
Peacock, NBCUniversal’s streamer, is upping prices on its 22m customers, the first increase since its 2020 launch. The hikes are only $1-$2 per month depending on the tier, but every dollar counts: The service is expected to lose $3B this year.
Oops: Tesla’s board of directors will return $735m to settle a 2020 lawsuit alleging they overpaid themselves.
Meanwhile: Nearly four years after its unveiling, Tesla completed its first Cybertruck, and the internet’s car geeks have a lot to say about the striking new stainless steel truck. One common refrain: The completed model appears to have a misaligned door.
i of the beholder: Someone paid $190k+ for a 4GB iPhone from 2007, still in the box, for some reason.
A fine line: Spain’s antitrust watchdog says Amazon and Apple colluded to restrict competition, fining them $56.7m and $161.4m, respectively. Both companies disagreed and will appeal, because of course.
Reddit is deleting all pre-2023 user chats and messages as it migrates data to new servers. If you want yours back, you can apparently request it and Reddit will send your messages over in Microsoft Word docs.
Mind your manor: Let’s say you just bought a 40k-square-foot mansion and need a staff of 20 to keep it up to snuff. Good for you. Less good for you? You’ll need to spend ~$1.8m/year these days to make that happen, perInsider.
Kraft Heinz is building a $400m distribution center in Illinois to move products faster and reduce its carbon footprint. It expects to add 150+ jobs.
Update: Taco John’s has relinquished its trademark on “Taco Tuesday.” It’s now fair game for any US restaurant — except in New Jersey, where Gregory’s Restaurant and Bar owns the trademark.
Team culture is made from more than pingpong tables and kegs. It’s about shared beliefs and common goals, and we broke down how to build it within your organization.
RI-CO-LAAAAA!
Watch, read, or listen: Why so many brands use sound to make you buy stuff
From Netflix’s “ta-dum” to McDonald’s “I’m Lovin’ It” slogan, brands have used sounds to stand out for decades.
This week, we made it our mission to find out how much a sonic logo really matters, and what goes into constructing an audio brand in the first place.
We’re offering this story up as a video, article, and podcast:
🎥 Watch our on-location documentary about how sonic brands are made.
📖 Read our feature story on why so many brands use sound.
👂Listen toour recent podcast episode about whether sonic logos actually work.
In the meantime, we’re gonna try to convince the higher-ups to adopt “The Hustle” (song) as the official sonic brand of The Hustle (newsletter).
Unlikely to work out — but we’ll keep you posted if it does.
Free Resource
Use this template for salespeople payouts
Your hunter-gatherers deserve proper compensation. Here’s a DIY way to divvy out the funds.
This free compensation calculator helps you pick the payment structure that best suits your sales reps — whether that means set rate commission, tiered commission, or territory volume.
It also helps salesfolks crunch the numbers themselves.
It’s a seven-headed spreadsheet… with one specific purpose.
TikTokers turned McDonald’s Grimace Shake into horror. It was engagement gold.
2023-07-19T00:00:00Z
Juliet Bennett Ryla
What happens when TikTok turns your brand into a horror movie? Free advertising.
ICYMI: In June, McDonald’s launched a special meal with a purple milkshake to celebrate Grimace’s birthday — Grimace being its purple mascot that’s possibly a large anthropomorphic taste bud.
Shortly thereafter…
… TikTokers began posting lofi horror videos in which trying the Grimace Shake resulted in mayhem. Videos ranged from simple — taste testers gurgling purple goo — to more elaborate:
The hashtag #GrimaceShake currently has 2.7B views on TikTok, most of them from these videos.
McDonald’s…
… has achieved viral success with recent marketing gimmicks — its adult happy meals and Halloween Boo Buckets often sold out.
But this trend was started by a third party. TikToker Austin Frazier, inspired by a similar video of someone trying a Burger King Spider-Verse Whopper, posted the first video. Then, it took off organically.
McDonald’s ultimately responded by tweeting as Grimace, “meee pretending i don’t see the grimace shake trendd.”
How did this affect McDonald’s?
Jonah Berger, an associate professor of marketing at the Wharton School of the University of Pennsylvania, toldThe New York Times, “It’s not only raising awareness of the brand, but it makes the brand cooler among a key demographic, which is young people.”
Teens bought multiple shakes to dump on themselves, and Truist credited Grimace with same-store sales growth in Q2.
Guillaume Huin, McDonald’s social media director for brand content and engagement, tweeted that McDonald’s achieved “billions in reach, millions in engagements, [and] millions of mentions,” while people genuinely had fun.
Meanwhile, the trend has since spread to Cold Stone Creamery’s Barbie Shake, “yassifying” those who try it.
Fun fact: Grimace used to be the four-armed “Evil Grimace,” who stole milkshakes and beverages. In this commercial, Ronald McDonald tricks Grimace into falling into a pool. Could it be that Grimace was simply back for… revenge?
AROUND THE WEB
📅 On this day: In 1848, the Seneca Falls Convention kicked off in New York. Organized by abolitionists Lucretia Mott and Elizabeth Cady Stanton, it was the first women’s rights convention in the US.
🐶 Haha: if you’ve ever wanted to measure something in corgis or grains of sand, well, here you go.
👀 Video:How to ensure AI ethics are respected and used responsibly in marketing your business (plus, some examples of ethics concerns).
Laptop lookin’ sparse? Water bottle lookin’… clear?
You’re only {{5-contact.referral_count}} referrals away from your first Hustle swag, Sam’s Stickers. Slap a few of these bad boys on the ol’ laptop and let everyone in the coffee shop know that you know. You know?
You’re only {{15-contact.referral_count}} referrals away from earning our signature dad hat meant for ladies, gents, and dads alike to show folks they’re in the club.
You’ve got the tumbler. You’ve got the hat and hoodie to match. It’s time to beef up that collection, don’t you think?
Get {{35 – contact.referral_count}} more referrals and we’ll send you our cozy new swag bundle: The Hustle Hooded Long Sleeve and Island Design Tee. These relaxing tops would be great accessories for your next island trip (if you get that far *wink*).
Hey, we see you. You’re out there spreading the gospel of The Hustle like it’s nobody’s business. Seems like you might be ready for a little more…
Get {{75 – contact.referral_count}} more referrals and we’ll slide you a free subscription to Trends.
And no, this ain’t an ad. We just think you’re the kinda person who would thrive in our top-tier community (it’s usually $299) full of founders, investors, and builders (AKA ambitious, no B.S. business folks like you) — and enjoy our premium research and content.
Well, well. Look who’s climbing the ladder. We’re so proud.
You seem like the kind of person who can work a network. So you’ve landed an opportunity to bag The Hustle’s grand prize.
Get {{1000 – contact.referral_count}} more referrals and you’ve got yourself a free $1,500 airline gift card to the destination of your choosing – plus a set of Tumi luggage for all your favorite things.
If you’re not sure where you wanna go… better start looking.
You’re just {{1000 – contact.referral_count}} referrals away.
We use cookies to make the Hustle website a better place. Cookies help to provide a more personalized experience and relevant advertising for you, and web analytics for us. To learn more about the different cookies we're using, check out our Cookie Settings. For further information, check out our Cookie Policy & our Privacy Policy.
This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Cookie
Duration
Description
__cf_bm
30 minutes
This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Cookie
Duration
Description
__hssc
30 minutes
This cookie keeps track of sessions.
This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie.
It contains the domain, viewCount (increments each pageView in a session), and session start timestamp.
__hssrc
session
Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser.
If this cookie does not exist when HubSpot manages cookies, it is considered a new session.
It contains the value "1" when present.
__hstc
6 months
The main cookie for tracking visitors.
It contains the domain, utk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).
_ga
6 months
The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.
_gat_gtag_UA_58267113_7
1 minute
This cookie is set by Google and is used to distinguish users.
_gat_UA-58267113-7
1 minute
This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.
_gcl_au
3 months
Provided by Google Tag Manager to experiment advertisement efficiency of websites using their services.
_gid
1 day
Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously.
_hjAbsoluteSessionInProgress
30 minutes
This cookie is set by Hotjar. Used to detect the first pageview session of a user.
_hjFirstSeen
session
This cookie is set by Hotjar. Identifies a new user’s first session.
Used by Recording filters to identify new user sessions.
_hjIncludedInPageviewSample
30 minutes
This cookie is set by Hotjar. Set to determine if a user is included in the data sampling defined by the website limit.
_hjIncludedInSessionSample
30 minutes
This cookie is set by Hotjar. Set to determine if a user is included in the data sampling defined by your site's daily session limit.
_hjSession_1955701
30 minutes
This cookie is set by Hotjar. Holds current session data.
Ensures subsequent requests in the session window are attributed to the same session.
_hjSessionUser_1955701
1 year
This cookie is set by Hotjar.
Set when a user first lands on a page.
Persists the Hotjar User ID which is unique to that site.
Ensures data from subsequent visits to the same site are attributed to the same user ID.
_omappvp
6 months
The _omappvp cookie is set to distinguish new and returning users and is used in conjunction with _omappvs cookie.
_omappvs
20 minutes
The _omappvs cookie, used in conjunction with the _omappvp cookies, is used to determine if the visitor has visited the website before, or if it is a new visitor.
_omra
6 months
This cookie is set by OptinMonster. Used to store interaction and conversion data for campaigns in conjunction with Revenue Attribution.
hubspotutk
6 months
This cookie keeps track of a visitor's identity. It is passed to HubSpot on form submission and used when deduplicating contacts.
It contains an opaque GUID to represent the current visitor.
om-wip10afyetrnlu70kibe
1 month
Used to determine if a visitor has been shown a campaign by the slug
sailthru_content
1 year
This cookie is set by Sailthru. Tracks recent pageviews for all visitors, and can be used to populate a new user profile.
sailthru_pageviews
30 minutes
This cookie is set by Sailthru to tracks the number of page views for each user.
sailthru_visitor
1 year
This cookie is set by Sailthru. The cookie contains an id that is used to identify a user’s pageviews within a session.
test_cookie
15 minutes
The test_cookie is set by doubleclick.net and is used to determine if the user's browser supports cookies.
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.
Cookie
Duration
Description
_clck
1 year
This cookie is set by Microsoft Clarity. Persists the Clarity User ID and preferences, unique to that site, on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.
_clsk
1 year
This cookie is set by Microsoft Clarity. Connects multiple page views by a user into a single Clarity session recording.
_cq_check
Session
This cookie is set by CHEQ AI Technologies. Used to monitor the technical information and use of devices that connect to our website to protect it from malicious traffic.
_cq_duid
3 month
This cookie is set by CHEQ AI Technologies. Used to monitor the technical information and use of devices that connect to our website to protect it from malicious traffic.
_cq_suid
Session
This cookie is set by CHEQ AI Technologies. Used to monitor the technical information and use of devices that connect to our website to protect it from malicious traffic.
_fbp
3 months
This cookie is set by Facebook to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising, after visiting the website.
_lc2_fpi
2 years
This cookie is set by LiveIntent. A random, unique, device identifier, stored as a 1st party cookie, to enable targeted advertising
_li_dcdm_c
session
This cookie is set by LiveIntent. The domain name where the _lc2_fpi cookie was stored
_tt_enable_cookie
13 months
To measure and improve the performance of your advertising campaigns and to personalize the user's experience (including ads) on TikTok.
_tt_sessionId
13 months
To measure and improve the performance of your advertising campaigns and to personalize the user's experience (including ads) on TikTok.
_ttp
13 months
To measure and improve the performance of your advertising campaigns and to personalize the user's experience (including ads) on TikTok.
_twclid
30 days
This cookie is set by Twitter. It is used for tracking and personalization purposes, such as remembering a user's preferences and activity on the site.
_uetsid
1 day
This cookie is set by Microsoft Advertising. It contains the session ID for a unique session on the site.
_uetvid
13 months
This cookie is set by Microsoft Advertising. UET assigns this unique, anonymized visitor ID, representing a unique visitor. UET stores this data in a first-party cookie.
AnalyticsSyncHistory
1 month
Linkedin sets this cookie. Used to store information about the time a sync took place with the lms_analytics cookie
ANONCHK
10 minutes
This cookie is set by Microsoft Clarity. Indicates whether MUID is transferred to ANID, a cookie used for advertising. Clarity doesn't use ANID and so this is always set to 0.
auth_token
5 years
This cookie is set by Twitter. It is used for authentication purposes, to keep the user logged in to their Twitter account.
bcookie
1 year
This cookie is set by LinkedIn. Browser Identifier cookie to uniquely identify devices accessing LinkedIn to detect abuse on the platform.
bscookie
1 year
This cookie is set by Linkedin. Used for remembering that a logged in user is verified by two factor authentication.
cg_uuid
1 year
Sets a unique ID for the visitor that allows third-party advertisers to target the visitor with relevant advertisements. This pairing service is provided by third-party advertisement hubs, which facilitates real-time bidding for advertisers.
CLID
1 year
Identifies the first-time Clarity saw this user on any site using Clarity.
fr
3 months
Facebook sets this cookie to show relevant advertisements to users by tracking user behaviour across the web, on sites that have Facebook pixel or Facebook social plugin.
guest_id
1 year
This cookie is set by Twitter to identify and track the website visitor.
guest_id_ads
1 year
This cookie is set due to Twitter integration and sharing capabilities for the social media.
guest_id_marketing
1 year
Used to detect whether a user is logged into Twitter.
lang
Session
This cookie is set by Linkedin. Used to remember a user's language setting to ensure LinkedIn.com displays in the language selected by the user in their settings.
li_gc
6 months
This cookie is set by Linkedin. Used to store consent of guests regarding the use of cookies for non-essential purposes.
lidc
24 hours
Linkedin sets this cookie. Used To facilitate data center selection.
lidid
2 years
This cookie is set by LiveIntent. A random, unique, device identifier, stored as a 3rd party cookie, used to enable targeted advertising
muc_ads
2 years
Collects data on user behaviour and interaction in order to optimize the website and make advertisement on the website more relevant
MUID
9 months
This cookie is set by Microsoft Advertising. Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes.
personalization_id
2 years
This cookie is set due to Twitter integration and sharing capabilities for the social media.
SM
session
This cookie is set by Microsoft Clarity. Used in synchronizing the MUID across Microsoft domains.
SRM_B
1 year 24 days
This cookie is set by Microsoft Clarity. Identifies unique web browsers visiting Microsoft sites.
UserMatchHistory
1 month
Linkedin sets this cookie. Used for id sync process. It stores the last sync time to avoid continually repeating the syncing process.
X-AB
1 day
This cookie is set by Snapchat. This is a tool used to combine or change content on the website. This allows the website to find the best variation/edition of the site.