Hackers use ChatGPT to create fake pages that trick users into downloading malware

Cybersecurity firm Push Security warns that hackers are using ChatGPT's sharing feature to create fake outage pages. They place malicious content on the legitimate chatgpt.com domain, making it hard for users and security tools to detect. Victims click Google ads, land on a fake ChatGPT page claiming 'site is down due to high traffic,' and are prompted to download a desktop app. Clicking the download button redirects to a site impersonating OpenAI's download portal. The site hides its true nature from security scanners, only showing the malicious download to targeted victims. The malware checks if it's running in a virtual machine. Similar attacks have been seen targeting Claude, suggesting hackers are testing different platforms.