Fake ChatGPT Phishing Emails Sent via Verified OneLogin Domains

A targeted phishing campaign impersonating the ChatGPT Account Team tricks users into granting tokens that can read all chats. The emails were sent through SendGrid using legitimate verified domains like OneLogin and RevUp POS, bypassing email authentication checks.

2026-11-08 ~ 2026-11-08 · 2 related posts

• Phishing emails impersonating ChatGPT sent via OneLogin's authenticated domain, passing SPF/DKIM/DMARC — viksit · 2026-11-08
• Phishing emails posing as ChatGPT abuse legit OneLogin infrastructure to steal access — AccBalanced · 2026-11-08