Phishing Attack Targets ChatGPT Users with Fake Billing Alerts

• •Phishing emails impersonate OpenAI to steal payment information.
• •Recipients are urged to click a malicious link to update billing details.
• •MailGuard identified multiple red flags in the fraudulent messages.

A phishing campaign has emerged, targeting ChatGPT users with fraudulent emails claiming payment issues. The emails, impersonating OpenAI Account Services, instruct recipients to update their billing information via a malicious link. This link leads to a fake billing page designed to harvest personal and credit card details. The phishing attempt exploits users' trust in OpenAI and creates a sense of urgency by threatening service interruption. MailGuard has identified the sender's email as not belonging to OpenAI, and the message contains several red flags, including a generic greeting and a shortened URL. Users are advised to be cautious and verify the authenticity of such communications to avoid falling victim to this scam.