Loading story…
A credential-phishing campaign is impersonating OpenAI/ChatGPT subscription billing to target work and personal users. The fraudulent emails use ChatGPT branding, urgent payment-update language, a claimed 48-hour deadline, and an “Update Payment Information” button to pressure recipients into providing OpenAI login and potentially payment details.
Cofense found that messages originate from a non-OpenAI nxcli.io address and route victims through a Google APIs redirect wrapper to a counterfeit ChatGPT login page hosted on nxcli.io. Credentials entered on the page are exfiltrated before victims are sent to an error page. Organizations should block the identified malicious sender and nxcli.io phishing paths, and remind users that billing requests should be verified directly through official OpenAI account portals.
Get the infrastructure and lures behind it.
1 event from the most recent confirmed update back to the earliest known activity.
Cofense Phishing Defense Center identified a campaign using fraudulent OpenAI/ChatGPT subscription-payment emails to lure work and personal users to a counterfeit login page. The messages used ChatGPT branding, a 48-hour payment deadline, and an “Update Payment Information” button; the flow used a Google APIs redirect to nxcli.io-hosted pages that captured submitted credentials before redirecting victims to an error page.
Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.
Indicator values are masked on this page. See the values in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.
Get the infrastructure, lures, and IOCs behind this campaign, ready to push into your email and identity stack.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Threat actors are abusing legitimate email and collaboration workflows to make social-engineering lures appear trustworthy. A reported campaign weaponizes **OpenAI’s “invite your team”** feature by placing malicious URLs or scam phone numbers in the organization name field, causing invitations to be sent from legitimate OpenAI email infrastructure and increasing the likelihood recipients will click links or call attacker-controlled numbers; the approach is particularly effective against businesses because a single invite workflow can target multiple employees. Separately, consumers are being targeted by a seasonal surge of **tax-refund/back-tax impersonation scams** delivered via SMS and email that direct victims to malicious links or fraudulent call centers to “verify” identity—harvesting SSNs and banking details for identity theft and refund fraud. Compounding the broader email-risk environment, **Gmail’s spam filtering and tab categorization reportedly malfunctioned** at large scale, pushing promotional mail into Primary inboxes and flagging legitimate senders with warnings; such misclassification can increase exposure to phishing by reducing the effectiveness of inbox triage and user trust signals during active scam waves.
Jun 29, 2026
Check Point reported that **Microsoft** remained the most impersonated brand in phishing attacks in Q2 2026, accounting for **22.6%** of observed attempts, while **ChatGPT** entered the top 10 for the first time at about **1.1%**. The report said technology companies were the most targeted sector, alongside continued abuse of well-known consumer and social platforms including **PayPal**, **WhatsApp**, and **Facebook**. Researchers highlighted a June campaign in which attackers sent a fake **ChatGPT Plus** payment-failure email that imitated an OpenAI billing notice and redirected victims to a fraudulent credit-card harvesting page. Other campaigns included a cloned **Michael Kors** storefront, a fake **UNIQLO** site, and a bogus **Microsoft** support page that delivered malware disguised as an Office security update, showing how attackers relied on urgency around billing problems, security alerts, and required updates to drive victims into surrendering credentials, payment data, or installing malicious software.
Jul 28, 2026
Threat actors have launched sophisticated malware campaigns that exploit legitimate AI chat platforms, such as ChatGPT and Grok, to deliver malicious code to unsuspecting users. By using SEO poisoning and sponsored Google search results, attackers redirect users searching for common macOS troubleshooting tips to fake shared chat links on these AI platforms. These chats appear to offer helpful system instructions but actually embed obfuscated, base64-encoded commands that, when executed, install multi-stage malware. The infection process often involves social engineering tactics, such as prompting users to enter their system password under the guise of credential verification, which is then used to escalate privileges and deploy the main malware payload. Security researchers have identified the malware as variants of information stealers, including Shamus and AMOS, which are capable of stealing credentials and cryptocurrency, and employ advanced evasion techniques like multi-layered encoding and custom decoders to avoid detection. This attack method is particularly effective because it leverages the inherent trust users place in well-known AI brands and their official domains, bypassing traditional safety checks. The campaigns highlight a growing trend in cybercrime where legitimate AI tools are weaponized to facilitate malware delivery, making detection and prevention more challenging. Security analysts emphasize the need for increased vigilance when interacting with AI-generated content, especially when prompted to execute system commands, and recommend enhanced monitoring for suspicious activity originating from AI platform interactions.
Jun 29, 2026