Crypto Scammers Hijack OpenAI’s Press Account to Post Phishing Links

Crypto scammers recently took over OpenAI’s press account on X, using it to post phishing links targeting OpenAI users. This breach occurred on September 23, and although the posts have since been deleted, the impact highlights the ongoing threat posed by cybercriminals in the cryptocurrency space. Notably, this marks the fourth time an OpenAI X account has been compromised in the past 15 months.

Details of the Attack

The attackers promoted a token named “OPENAI,” falsely claiming it would bridge the gap between blockchain and AI. They promised users a portion of the token’s supply and access to future beta programs, enticing them to click on a phishing link that led to a flagged website.

To appear legitimate and prevent users from warning others, the attackers disabled comments on the malicious posts, adding the message: “Comments turned off due to malicious links. Good luck all!”

How the Phishing Scam Worked

One user on X reported that the fake website mimicked OpenAI branding and initially appeared legitimate. However, clicking the OpenAI logo prompted visitors to connect their crypto wallets. Once users connected their wallets, they were tricked into signing a fraudulent transaction, granting the attacker control over their assets and enabling them to drain all funds from the compromised wallet.

“Comments turned off due to malicious links. Good luck all!”

Preventing Phishing Scams

To protect yourself from phishing scams, consider the following tips:

  • Verify URLs: Always check the URL for legitimacy before clicking any links.
  • Enable Two-Factor Authentication (2FA): Adding an extra layer of security can prevent unauthorized access.
  • Use Trusted Wallets: Only connect your wallet to trusted platforms.
  • Stay Informed: Regularly update yourself about the latest security threats and how to mitigate them.

Previous Incidents

Unfortunately, similar attacks have targeted OpenAI executives multiple times. Recently, OpenAI researcher Jason Wei’s account was hacked to promote the same phishing scheme. Previously, the attackers targeted OpenAI’s Chief Scientist, Jakub Pachocki, and CTO Mira Murati in June 2023.

Other notable incidents include a similar attack on the virtual reality-focused project Decentraland, where scammers promoted a fake airdrop of its native token to mislead users into connecting their wallets and approving a malicious transaction.

Despite the recurring nature of these attacks, it remains unclear if the same group of attackers is behind them.

Stay updated on the latest cryptocurrency news and security tips to protect your investments and assets.

#CryptoTech #Crypto #CryptoLife