Attackers Use Spoofed ChatGPT Site to Deliver Malware

Malwarebytes warns that attackers are using sponsored search results and SEO-poisoned fake 'ChatGPT' download pages to deliver platform-specific malware: a Windows installer that opens a backchannel to attacker-controlled servers, and macOS malware that steals browser passwords, cookies, Telegram sessions, crypto wallets and attempts to replace legitimate Ledger and Trezor wallet apps. The campaign exploits users searching for AI tools and highlights the importance of verifying official download sources and improving security awareness.