ChatGPT Plus
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Phishing reported by GBHackersPhishing kit posing as ChatGPT Plus billing uses rotating WordPress sites to steal payment details
- Phishing reported by Cyber Security NewsFake ChatGPT Plus billing emails steal card details and one-time passwords
Recent news
Phishing kit posing as ChatGPT Plus billing uses rotating WordPress sites to steal payment details
A phishing kit impersonating OpenAI uses disposable, rotating WordPress websites and live operator oversight to harvest payment card details and potentially one-time passwords. The lure is a fraudulent ChatGPT Plus billing email warning of a failed subscription payment, which sends victims to a fake checkout page.
Fake ChatGPT Plus billing emails steal card details and one-time passwords
Fortra researchers documented a phishing campaign impersonating OpenAI billing notices that lead to fake checkout pages on short-lived WordPress sites. The pages capture card details, then hold victims on an indefinite spinner while a human operator, polling a dashboard, decides whether to request a one-time password, show an error or end the session. Fortra observed phishing only, with no malware delivery.