Scammers exploit OpenAI's official email infrastructure for phishing attacks
kieranklaassen · x · 2026-08-29
A sophisticated phishing exploit uses OpenAI's official email infrastructure. Attackers create an org like "OpenAI x X Partnership" and manipulate HTML to hide the real header, using whitespace to truncate the official body in Gmail. Users click the fake link at the top and get scammed. Disclosure sent to OpenAI.
More from Safety
- AI blamed for exploiting privacy chain: Pirate Chain rolls back after Ironwood vulnerability — adamamcbride · 2026-10-15
- SK Hynix ties new US plant to looser chip equipment exports to China, sources say — pstAsiatech · 2026-10-15
- Fox-IT releases the Cobalt Strike Beacon Corpus for detection research — cyb3rops · 2026-10-15
- Bank of America puts 4,000 people on fixing vulnerabilities uncovered by AI models — The Decoder · 2026-10-15
- Inside SAIF: a16z's $25M bet on AI rewriting the economics of cyber defense for small towns — a16z · 2026-10-15
- a16z launches SAIF, a $25M nonprofit to bring AI cyber defense to 1,800 rural hospitals — a16z · 2026-10-15