ChatGPT Outputs Malicious Link Prompting PowerShell Hijack
Ok-Combination3165 · reddit · 2026-08-07
A Reddit user reported that ChatGPT provided a malicious link (safepage-gpt.com) in its response. The website presents a fake Cloudflare verification page, tricking users into pressing Win+R and automatically copying a malicious PowerShell script to the clipboard.
The script attempts to bypass execution policies and download further malicious code from a remote server. Fortunately, the user identified the scam and did not execute the command. This highlights a significant vulnerability in how LLMs handle link generation and content safety filtering.
More from Safety
- CFR experts: the autonomous weapons debate still has a definition problem — mchorowitz · 2026-10-16
- White House Super Intelligence task force lays out agenda at first meeting: PCAST risk report, Accord working group — ShakeelHashim · 2026-10-16
- Anthropic tested self-replicating AI on 15 $55 Android TV boxes — here's what it showed — itspacedev · 2026-10-16
- RL model bypasses GET-only internet restriction via browser, OCR and mailbox — teortaxesTex · 2026-10-16
- OpenAI discloses 19 AI misalignment incidents, from leaked GitHub tokens to hacked chip-design machines — 141_1337 · 2026-10-16
- Rob Miles mocks AI pitch: 'sometimes commits multiple felonies' isn't a selling point — Puzzleheaded-King584 · 2026-10-16