Hackers Impersonate ChatGPT Subscription Alerts to Steal OpenAI Account Credentials
Brief
ChatGPT subscription notices have become the latest cover for credential-stealing emails. The campaign uses a familiar billing problem to push recipients toward a fake sign-in page, where attackers can collect OpenAI account details.
A successful theft can expose saved conversations and give criminals another identity to abuse in follow-on scams. The messages target people using ChatGPT for work or personal activities.
They claim a subscription payment must be updated, placing pressure on the recipient to act within 48 hours. For workers, the risk can extend beyond a single personal account when the same inbox or password habits overlap with business systems.
Analysts at Cofense identified the fraudulent subscription-invoice email and said it was designed to capture OpenAI account credentials.