| Submit your comments on this article |
| Cyber |
| Fake ChatGPT site infects Windows and Mac users, and steals window pages and PWDs |
| 2026-06-03 |
| [MalwareBytes] A convincing fake website is impersonating OpenAI’s ChatGPT download page and infecting visitors with malware designed to steal passwords, browser data, cryptocurrency wallets, and other sensitive information. The site, openew[.]app, closely mimics OpenAI’s real ChatGPT download experience and offers what appear to be official desktop apps for both Windows and macOS. Instead, Windows users receive a credential-stealing malware loader, while Mac users get Odyssey Stealer, a fork of Atomic Stealer (AMOS), a well-known macOS malware family associated with cryptocurrency theft. The dual-platform setup is what makes the operation notable. Clicking the Windows download delivers a fake installer that opens a back channel to an attacker-controlled server. Clicking the macOS button delivers malware that steals browser passwords, cookies, Telegram sessions, cryptocurrency wallets, and other sensitive files. It also attempts to replace legitimate Ledger and Trezor wallet apps with trojanized versions. If you only download ChatGPT from OpenAI’s official download page or the Microsoft Store, you were not the target here. But if you searched for “ChatGPT download” and clicked an ad or unfamiliar result, you may have given attackers access to your online accounts, browser sessions, saved passwords, and potentially your cryptocurrency holdings. Malwarebytes protects users from this malware. |
| Posted by:NN2N1 |
| #3 |
| Posted by: swksvolFF 2026-06-03 21:03 |
| #2 |
| Posted by: SteveS 2026-06-03 14:01 |
| #1 |
| Posted by: Lord Garth 2026-06-03 09:39 |