3 days ago
8
ZDNET’s cardinal takeaways
- There’s a caller scam involving ChatGPT.
- The scam starts with a sponsored Google link.
- The nexus leads to a customized GPT that gives malicious information.
A caller scam involving ChatGPT has emerged, and it mightiness pb you to instal malware connected your machine if you’re not careful.
Over the past respective days, reports person surfaced of users encountering a unusual enactment erstwhile utilizing ChatGPT. “Service Availability Notice,” the connection reads. “We’re presently experiencing constricted availability connected the superior domain. Please take 1 of the pursuing options to continue:”
Also: This caller cyberattack tricks you into hacking yourself. Here’s however to spot it
The chat presents an connection to upgrade to a Plus subscription oregon a nexus to a backup domain. Here’s however the scam works, wherefore it’s truthful convincing, and what you tin bash to debar it.
(Disclosure: Ziff Davis, ZDNET’s genitor company, filed an April 2025 suit against OpenAI, alleging it infringed Ziff Davis’ copyrights successful grooming and operating its AI systems.)
Artie Beaty/ZDNETThe customized GPT scam
The scam starts erstwhile you hunt “ChatGPT” successful Google. Like astir each Google search, you’ll spot sponsored results, oregon paid ads, supra the authentic hunt results. If you click connected what appears to beryllium a existent nexus to ChatGPT, you’re taken to what appears to beryllium the existent site.
Instead, you’ve landed connected a customized GPT, oregon a user-generated, specialized mentation of ChatGPT that’s tailored for circumstantial tasks. In this instance, the task is to spit retired the availability announcement effect nary substance what’s entered.
What’s astir convincing is that you’re connected the existent ChatGPT domain and your relationship is logged successful (if you were before). There’s thing astatine archetypal to bespeak this isn’t authentic different than the sanction “Plus 5.6.” If you’re not acquainted with ChatGPT exemplary naming conventions, though, this wouldn’t instrumentality out.
Also: I’m a tech pro, and an AI occupation scam astir fooled me
If you click the nexus successful the effect (it’s a escaped tract hosted connected Google Sites and evidently not a ChatGPT domain), you’re presented with a fake Cloudflare verification and instructions to paste and tally a bid successful Windows/PowerShell. Running that bid installs malware connected your computer.
I tried the process myself and clicked connected the archetypal effect aft a elemental hunt for ChatGPT. I landed connected 1 of the scams. No substance what I typed, I got the aforesaid “limited” effect with a link. My exertion present astatine ZDNET tried the aforesaid process and got the mean ChatGPT, truthful it doesn’t look to beryllium each sponsored results.
Google told maine it had deactivated respective accounts associated with the circumstantial advertisement run I saw, but that, of course, doesn’t mean this contented won’t popular up again, truthful it’s bully to beryllium aware.
How to enactment safe
Here’s however you tin debar this circumstantial scam, and immoderate wide proposal for staying harmless online.
- Type chatgpt.com consecutive into your browser alternatively of searching for it.
- Avoid clicking connected (or astatine slightest beryllium highly suspicious of) sponsored links successful Google. These ads person a past of being malicious, truthful overmuch truthful that Google has adjacent deployed Gemini to observe and artifact atrocious ads.
- Never paste and tally a bid connected your machine if you’re not definite what it volition do, particularly if a nexus oregon pop-up tells you to.
Roman Oliinyk, CEO and laminitis of PayCore Media Inc, a web information specializer who has spent 10 years gathering data-leak extortion systems for ample US companies, noted that a existent Cloudflare cheque would ne'er inquire you to bash thing connected your keyboard. “At most,” helium said, “it asks you to cheque a container oregon property a button.”
Also: This elemental ChatGPT instrumentality helps you spot scams earlier you click oregon respond
Oliinyk besides recommended treating sponsored results arsenic ads (which they are) and treating a nexus from a chatbot arsenic you would a nexus from a stranger.
I’ve reached retired to some Google and OpenAI for comment. OpenAI hasn’t responded yet, but a Google spokesperson told me: “Malvertising has nary spot connected Google. We’ve suspended respective advertiser accounts to artifact this run and we continuously update our defenses to halt caller threats.”
Artie Beaty
Contributing Writer
Artie Beaty is simply a freelance writer, based conscionable extracurricular Charlotte, with a passionateness for astute location tech and tech news. He has a bachelor's successful journalism from UNC Charlotte and has been penning for implicit 15 years. On the weekends you'll find him starring haunted shade tours of uptown Charlotte. See afloat bio
English (US) ·