Cybersecurity firms targeted by fraudulent OpenAI organization invites

Push Security and BleepingComputer report a 'Poisoned Tenant' campaign in which attackers create attacker-controlled OpenAI organizations impersonating legitimate companies and send legitimate-looking ChatGPT workspace invitations to targeted employees; invited users were assigned Owner privileges and an attacker-controlled account with a payment method was present, indicating the goal is to trick employees into sharing sensitive information within the fraudulent workspace.