Chatbot Conundrum: Phishing Attempts of OpenAI’s ChatGPT
ID: d1790833-ba9e-51b6-a793-c2b30f5b9b95
STIX ID: report--d1790833-ba9e-51b6-a793-c2b30f5b9b95
Feed Name: Cofense Blog
Threat Score
**Executive Summary:** Cofense PDC observed an active phishing campaign impersonating OpenAI/ChatGPT that sends fake subscription invoice emails containing an "Update Payment Information" link which redirects through a Google API wrapper to nxcli.io-hosted pages that clone the ChatGPT login to harvest credentials; the report includes screenshots, the redirect/payload URLs, and notes the malicious sender domain and payload paths.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.