Cybercriminals have launched a new online scam targeting ChatGPT users, using fake messages and links to trick victims into visiting malicious websites and potentially installing malware.
According to US technology news website ZDNET, the scam appears when users search for ChatGPT’s on Google. A sponsored advertisement may direct users to what appears to be the official ChatGPT website, where a fake custom GPT is presented.
The fraudulent custom GPT displays the same message in response to users’ queries, claiming that service availability on the primary domain is limited. It then encourages users to upgrade to ChatGPT Plus or visit an alternative domain.
The scheme is designed to appear convincing because users may remain on what appears to be ChatGPT’s legitimate domain. Those already logged into their accounts may also see their accounts functioning normally, making the scam harder to detect.
The fake custom GPT is reportedly named “Plus 5.6”, a name that could appear to ordinary users as a new model or ChatGPT Plus feature. The tactic is intended to persuade users to click on the link provided in the fraudulent message.
The major risk emerges when users follow the alternative or backup domain link. Such links can redirect them to malicious websites where malware may be installed or sensitive personal and account information could be compromised.
Cybersecurity experts have advised users not to blindly trust sponsored advertisements appearing in Google search results. They recommend accessing ChatGPT through its official website by entering the address directly rather than following unfamiliar links.
Users have also been advised to avoid clicking links included in unexpected service notifications, downloading files from unknown websites and entering personal or account information on suspicious pages.
Read also: WhatsApp Introduces New ‘Restricted Chat’ Feature
