Phishing · 1 source · latest 14h

Phishing kit posing as ChatGPT Plus billing uses rotating WordPress sites to steal payment details

PHISHINGChatGPT Plusredteam/daily · 1 source

Severity: High
Sources: 1

What happened

A phishing kit impersonating OpenAI uses rotating disposable WordPress sites and interactive operator control of the victim session to capture payment card data and potentially OTPs. Lures are fake ChatGPT Plus failed-payment notices. The article does not provide indicators of compromise, CVEs or specific domains, so defenders should rely on email and web filtering for billing-themed lures and monitor for brand-impersonating WordPress hosts.

For security analysts · Written by AI from 1 source · Wrong?

What to do

Treat unexpected ChatGPT Plus payment-failure emails as suspicious.
Do not enter payment details through links in such emails; check the subscription directly in the official ChatGPT account.

Written by AI from the sources, checked against them

Read the full story at the source