A fake ChatGPT billing email is after your OpenAI password

How to Help a Client When Their Email Has Been Taken Over

When a client's mailbox is already sending junk, password and MFA are not the finish line.

Hackers Impersonate ChatGPT Subscription Alerts to Steal OpenAI Account Credentials

ChatGPT subscription notices have become the latest cover for credential-stealing emails. The campaign uses a familiar billing problem to push recipients toward a fake sign-in page, where attackers can collect OpenAI account details. A successful theft can expose saved conversations and give criminals another identity to abuse in follow-on scams. The messages target people using […]

Fake ChatGPT billing email targets work and home users

Cofense has uncovered a phishing campaign aimed at stealing ChatGPT credentials and payment information

A fake ChatGPT billing email is after your OpenAI password

A fake ChatGPT billing email is steering users to a copy of the OpenAI login page that keeps whatever username and password they type. Josh Varden of Cofense’s Phishing Defense Center traced the email’s payment button through a Google redirect to the attacker’s page. The lure targets ChatGPT users on work and personal accounts alike, and it copies the kind of bill a subscriber already expects. Credentials entered on the fake page go to the … Mor…