MalwarePublished 29 May 2026

ChatGPT share links abused to host fake outage pages to deliver malware

Source Bleeping Computer

Description

Threat actors are abusing ChatGPT's content-sharing feature to display fake OpenAI outage pages that direct users to download malware disguised as the ChatGPT desktop application. [...]

Impact

Users who visit the malicious shared ChatGPT pages may be tricked into downloading and installing malware disguised as the ChatGPT desktop application. The malware payloads include infostealers and potentially other malicious software. The campaign's use of legitimate OpenAI URLs and cloaking techniques increases the risk of successful infection. There is no evidence of direct compromise of OpenAI services, but the abuse of the sharing feature facilitates malware distribution. The impact is primarily on end users who follow the fake outage instructions and install the malicious software.

Defensive guidance

There is no vendor patch or official fix for this abuse of ChatGPT's sharing feature, as it involves social engineering and misuse of legitimate platform functionality. Users should be warned not to trust outage messages or download prompts from shared ChatGPT links or unsolicited advertisements. Organizations should educate users to verify software downloads only from official OpenAI sources and avoid clicking on suspicious ads or links. Security teams should monitor for related phishing campaigns and block known malicious domains such as openew.app. Since this is a social engineering attack leveraging legitimate URLs, user awareness is critical.

References

bleepingcomputer.com/news/security/chatgpt-share-links-abused-to-host-fake-outage-pages-to-deliver-malware/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 29 May 2026, 18:33 UTC

References

Community reviews