logo

Fake ChatGPT download site infects Windows and Mac users with malware

ID: dacb3262-d407-500e-979c-87eb34ec9091

STIX ID: report--dacb3262-d407-500e-979c-87eb34ec9091

Feed Name: Malwarebytes Blog

Threat Score
75/100

Date Published: 2026-05-28

Date Updated: 2026-05-28

...
...

A malicious campaign impersonating OpenAI's ChatGPT download page (openew.app) distributes a Windows credential-stealing loader and a macOS Odyssey Stealer that harvests browser credentials, Telegram sessions, and cryptocurrency wallets — including trojanized wallet replacements — with identified file hashes, domain, and IP indicators; the report details tactics, technical behavior, IOCs, and remediation advice.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.