Tag: chatgpt
-
Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer
The Aoki infostealer, also known as Aokigahara, has expanded its collection capabilities to steal credentials and session files from AI coding assistants, putting developer identities and connected infrastructure at risk. First observed earlier in 2026, Aoki previously lacked collection routines for AI applications. Their appearance in recent samples indicates active development, with attackers broadening their…
-
OpenAI Sued Over ChatGPT Safety Risks by 8 US States
AGs Allege Chatbot Gives Dangerous Advice, Misleads Consumers. Eight state attorneys general have sued OpenAI, alleging it generative AI chatbot ChatGPT dispenses dangerous medical and mental health advice, including encouraging teen suicide, while misleading consumers about its safety measures and privacy protections. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/openai-sued-over-chatgpt-safety-risks-by-8-us-states-a-33119
-
OpenAI says it disrupted Russian and Iranian influence ops that used ChatGPT
A Latin American propaganda operation run by Russians and a cluster of Iranian fake journalist identities each had help from now-closed ChatGPT accounts, OpenAI’s safety team said. First seen on therecord.media Jump to article: therecord.media/openai-disrupts-russian-iranian-operations-chatgpt
-
Fake ChatGPT, Claude and Gemini Ads Use Browserthe-Browser Phishing to Steal Accounts
A human-operated phishing platform impersonating AI advertising products to steal credentials and manipulate multifactor authentication workflows. The operation targets advertising professionals through convincing account-connection pages, with researchers observing hundreds of victim submissions and continued activity during their investigation. Rather than presenting an obvious password request, the attackers sell a plausible business workflow: campaign optimization, spending…
-
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Tags: ai, business, chatgpt, credentials, cybersecurity, google, intelligence, mfa, openai, phishingCybersecurity researchers have disclosed details of a “human-operated phishing platform” that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus.The products, which claim to offer campaign optimization, spend audits, and business-account connections, are designed with one goal in First seen on thehackernews.com Jump to…
-
Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
A new campaign targeting ad account managers uses fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login credentials and multi-factor authentication (MFA) codes through browser-in-browser attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fake-chatgpt-gemini-sites-steal-advertising-accounts-mfa-codes/
-
OpenAI is adding invisible watermarks to ChatGPT and Codex text in the EU
OpenAI is preparing to add invisible watermarks to text generated by ChatGPT and Codex in the European Union. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-is-adding-invisible-watermarks-to-chatgpt-and-codex-text-in-the-eu/
-
OpenAI will show visual ads in ChatGPT while you generate images
OpenAI is expanding ads in ChatGPT, and one of the first new formats will show visual ads while you’re generating images. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-will-show-visual-ads-in-chatgpt-while-you-generate-images/
-
A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data
While the focus has been on AI agents’ hacking capabilities, a recently patched vulnerability in a ChatGPT app shows that AI software is itself an inviting”, and vulnerable”, target. First seen on wired.com Jump to article: www.wired.com/story/a-flaw-in-chatgpts-mac-app-could-have-let-hackers-grab-sensitive-data/
-
Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure
In yet another ClickFix-style campaign, threat actors abuse legitimate domains from OpenAI and Google to fool unsuspecting users. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/malicious-custom-gpts-chatgpt-rat-delivery-lure
-
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures
Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware.Huntress, which observed the activity in late September 2026, said it marks the abuse of yet another feature in trusted artificial intelligence (AI) platforms. Prior campaigns have weaponized…
-
Attackers Combine ChatGPT Feature Abuse With ClickFix to Deliver Trojan Malware
Cybersecurity researchers at Huntress identify campaign to deliver potent trojan which targets users searching for ChatGPT via Google First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/chatgpt-feature-abuse-to-deliver/
-
Attackers Abuse ChatGPT Custom GPTs to Deploy a Full-Featured RAT
Threat actors abused fake ChatGPT Custom GPTs and ClickFix to deliver a multi-stage RAT. ChatGPT’s Custom GPT feature is the latest legitimate surface being turned into a delivery mechanism, and Huntress researchers caught it in action across at least 40 incidents. A Custom GPT (now simply called a GPT) is essentially a version of ChatGPT…
-
Custom ChatGPTs push ClickFix attacks to deploy RAT malware
Custom variants of OpenAI’s ChatGPT promoted in sponsored Google results are directing unsuspecting users to malicious sites that use ClickFix attacks to deliver malware. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/custom-chatgpts-push-clickfix-attacks-to-deploy-rat-malware/
-
Malicious Custom GPT on chatgpt.com lures users into installing a RAT
Malware peddlers are using sponsored Google results to push a malicious ChatGPT Custom GPT named >>Plus 5.6,<< created to lead users to a fake Cloudflare CAPTCHA … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/29/malicious-chatgpt-custom-gpt-malware-via-clickfix/
-
Attackers weaponise ChatGPT Custom GPTs to deliver RAT via eight-stage ClickFix chain
Threat actors are abusing ChatGPT’s Custom GPT feature to funnel victims into a ClickFix attack that ends with a full-featured remote access trojan (RAT), according to new research from Huntress. The attackers created a Custom GPT titled “Plus 5.6”, designed to pass as a genuine ChatGPT model. Because Custom GPTs are hosted on chatgpt.com, the…
-
OpenAI is preparing “o,” an always-on ChatGPT assistant that could handle email
OpenAI is testing a new always-on assistant called “o”, and references to the unannounced feature briefly showed up on the company’s website. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-is-preparing-o-an-always-on-chatgpt-assistant-that-could-handle-email/
-
OpenAI is preparing a $500 ChatGPT Pro Max plan with faster Codex
OpenAI appears to be preparing a new ChatGPT Pro Max subscription that could cost $500 per month, but it’s unclear when it’ll begin rolling out. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-is-preparing-a-500-chatgpt-pro-max-plan-with-faster-codex/
-
Somewhere in your traffic logs, a bot is doing more than looking
Akamai has watched verified AI crawlers, ChatGPT among them, move from reading web pages to sending high-frequency POST requests. In a 30-day analysis of its global customers, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/22/ai-crawler-traffic-online-stores/
-
AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum
AI helped researchers exploit a Discourse flaw in under 72 hours, hijacking OpenAI staff accounts and exposing the risks of shared SSO. Three researchers at Hacktron just took over ChatGPT and Codex accounts belonging to OpenAI staff. The attack did not rely on phishing techniques or a leaked password. Through an image upload on OpenAI’s…
-
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
Three researchers at the security firm Hacktron used Anthropic’s Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository.The chain began with a bug in the software that runs OpenAI’s public help forum and moved through a weakness in…
-
ChatGPT Phishing Campaign Targets Both Work and Personal OpenAI Accounts
Threat actors are increasingly impersonating OpenAI’s ChatGPT service in credential-phishing campaigns, exploiting the growing use of generative AI across both enterprise and personal environments. A recently observed campaign uses a fraudulent subscription-payment notice to lure victims into disclosing OpenAI account credentials and potentially payment details through a convincing fake ChatGPT login page. The lure claims…
-
A fake ChatGPT billing email is after your OpenAI password
A fake ChatGPT billing email is steering users to a copy of the OpenAI login page that keeps whatever username and password they type. Josh Varden of Cofense’s Phishing … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/17/chatgpt-phishing-email-openai-password/
-
Tipp: In drei Schritten zum strengeren Datenschutz – So aktivieren Sie den Lockdown-Modus in ChatGPT
Tags: chatgptFirst seen on security-insider.de Jump to article: www.security-insider.de/so-aktivieren-sie-den-lockdown-modus-in-chatgpt-a-c4649afa8b6c25c89d0736e9bd0b309c/
-
Agenten beim Schummeln erwischt: OpenAI gesteht Kontrollverlust über seine KI
OpenAI will besorgniserregende KI-Vorfälle künftig schneller offenlegen. Zum Start liefert der ChatGPT-Entwickler gleich sechs reale Beispiele. First seen on golem.de Jump to article: www.golem.de/news/agenten-beim-schummeln-erwischt-openai-gesteht-kontrollverlust-ueber-seine-ki-2609-213140.html
-
Agenten beim Schummeln erwischt: OpenAI gesteht Kontrollverlust über seine KI
OpenAI will besorgniserregende KI-Vorfälle künftig schneller offenlegen. Zum Start liefert der ChatGPT-Entwickler gleich sechs reale Beispiele. First seen on golem.de Jump to article: www.golem.de/news/agenten-beim-schummeln-erwischt-openai-gesteht-kontrollverlust-ueber-seine-ki-2609-213140.html
-
Why AI Security Investments Aren’t Always a Goldmine
From Robust Early-Stage Funding to Unceremonious Exits in a Little Over a Year AI security investment opportunities are a dime a dozen, but – nearly four years after ChatGPT took the world by storm – lucrative exits are still uncommon. AI security deal volume has skyrocketed, but many investors exit with little to show for…
-
OpenAI Reportedly Pays Contractors $50+ an Hour to Review ChatGPT Chats
Leaked materials suggest OpenAI contractors review some ChatGPT conversations, raising new questions about human review, training settings, and user privacy. The post OpenAI Reportedly Pays Contractors $50+ an Hour to Review ChatGPT Chats appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-openai-chatgpt-human-review-privacy/
-
Uncensored AI sold on hacking forum as alternative to ChatGPT and Claude jailbreaks
A new AI subscription service called Luciferus is being marketed on a hacking forum as an alternative to jailbreaking ChatGPT or Claude, Sophos found. The Counter Threat Unit … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/15/luciferus-uncensored-ai-service-hacking-forum/