phishing
Cybersecurity firms targeted by fraudulent OpenAI organization invites
Medium
Summary
Cybersecurity firms are being targeted by a sophisticated phishing campaign where attackers create fraudulent OpenAI organizations, mimicking legitimate companies and inviting employees to join them. These invitations, appearing legitimate due to originating from OpenAI's official address, lead to compromised ChatGPT tenants where attackers impersonate the target company and gain administrative access. The goal appears to be tricking employees into sharing sensitive information within the ChatGPT workspace.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data