Phishing Attack Targets OpenAI Users via Fake ChatGPT Email

• •Phishing email impersonates OpenAI to steal user credentials.
• •Urgent language and fake billing claims pressure users to act quickly.
• •Users must verify URLs to avoid falling for the scam.

A phishing campaign is targeting OpenAI users with a fake ChatGPT billing email that attempts to steal login credentials. The email, appearing to be from ChatGPT, claims an outstanding balance of $23.80 and urges users to update their payment information within 48 hours to avoid service interruption. The email directs users to a fraudulent login page mimicking OpenAI's official site, using a Google redirect to obscure the true destination. Security experts from Cofense identified the phishing indicators, including the suspicious sender address and the misleading Google link. Users are advised to verify the URL before entering any credentials. This attack exploits social engineering tactics to create a sense of urgency. No specific CVEs are mentioned in relation to this phishing attempt. The current status indicates ongoing risk for users who may fall victim to this scam.