Phishing · 1 source · latest 11h

Fake ChatGPT Plus billing emails steal card details and one-time passwords

PHISHINGOpenAIredteam/daily · 1 source

Severity: High
Sources: 1

What happened

Fortra researchers documented a phishing campaign impersonating OpenAI billing notices that lead to fake checkout pages on short-lived WordPress sites. The pages capture card details, then hold victims on an indefinite spinner while a human operator, polling a dashboard, decides whether to request a one-time password, show an error or end the session. Fortra observed phishing only, with no malware delivery.

For IT people · Written by AI from 1 source · Wrong?

What to do

Verify any billing notice through your account directly rather than through an email link.
Investigate whether your organisation has received matching OpenAI-themed billing emails.
Hunt for the published indicators of compromise, including the recurring landing page structure and dashboard polling traffic, within your SIEM.
Report fraudulent hosting to the relevant provider, taking care with broad blocks because legitimate customers share the platform.

Written by AI from the sources, checked against them

Read the full story at the source