ChatGPT's terms bar its use for illegal or malicious purposes, but researchers had no trouble tweaking prompts to circumvent the restrictions and create a malicious macro to be hidden in an Excel file attached to email.