Fake GPT on Official ChatGPT Domain Tricks Users Into Installing Malware

Researchers at Huntress have uncovered a scam campaign that exploits the genuine ChatGPT domain to trick users into downloading malicious software onto Windows computers.

The campaign uses a fake GPT model as a lure, placing the deception within a web environment users may recognize and trust. Its presence on the real domain can make the malicious offering appear legitimate.

The reported tactic relies on persuading users to download malware. The available details do not establish that the ChatGPT platform itself was compromised.

The brief account does not identify the malware involved, explain what happens after installation or specify how many users may have been affected.

The discovery highlights the need to assess download instructions carefully, even when they appear on a familiar website. A genuine domain alone does not guarantee that every offering hosted there is safe.