Cybercriminals are impersonating OpenAI in a widespread phishing campaign designed to trick users into handing over financial information. The emails inform users that a payment for their ChatGPT subscription was declined, inviting them to click a link in order to update their payment method.
The phishing emails appear fairly convincing, but trained users could spot some red flags. The most obvious giveaway is that the emails were sent from “info@mta[.]topmarinelogistics[.]com,” which is clearly unrelated to OpenAI.
“This phishing attack included a suspicious sender domain, an email address designed to mimic legitimacy, and a sense of urgency in the message,” the researchers write. “The email closely resembled legitimate communication from OpenAI but relied on an obfuscated hyperlink, and the actual URL differed from one email to another.”
While this campaign was relatively unsophisticated, the researchers note the threat actors will continue using generative AI tools to improve their phishing attacks.
“it’s only a matter of time before GenAI advancements lead attackers to significant new and more sophisticated threats,” the researchers write. “Attackers are undoubtedly experimenting with AI, though, so it’s better for organizations to get ready now. Staying vigilant about traditional phishing red flags and strengthening basic defenses are still some of the best ways to guard against evolving cyber risks.
Barracuda cites security awareness training as a layer of defense against evolving social engineering attacks.
“Regularly train employees to recognize phishing attacks and the latest tactics used by cybercriminals,” the researchers write. “Emphasize the importance of scrutinizing unexpected requests, verifying email sources, and reporting suspicious activity. Use simulated phishing attacks to reinforce learning.”
KnowBe4 enables your workforce to make smarter security decisions every day. Over 65,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.
Barracuda has the story.
Here's how it works:
