Crypto scammers hijacked OpenAI’s official press account on X (formerly Twitter) on September 23, posting phishing links designed to deceive users.
The attackers promoted a fraudulent token named “OPENAI,” claiming it would revolutionize the integration of blockchain technology with artificial intelligence.
This alarming breach not only compromises user trust but also raises significant questions about the security protocols protecting high-profile accounts like OpenAI’s, which has yet to publicly acknowledge the breach.
The orchestrated scam utilized the hijacked account to promote a phishing link that promised users a chance to acquire a share of the new token supply.
According to security experts, the fake “OPENAI” token was specifically engineered to trick users into connecting their crypto wallets.
Once users made this connection, they were led to sign a fraudulent transaction that granted the scammers control over their digital assets.
Phishing attacks of this nature, often referred to as “approval phishing,” have resulted in over $2.7 billion in losses since 2021, according to a Chainalysis report.
To prevent users from alerting one another about the malicious content, the scammers disabled the comment section on their posts, ironically stating: “Comments turned off due to malicious links. Good luck all!”
This deceptive tactic added an illusion of legitimacy, making it increasingly difficult for users to recognize the scam in time.
A user on X reported that the phishing site closely mimicked OpenAI’s branding, including the company logo, further convincing unsuspecting visitors.
However, the prompt to connect a wallet revealed the scam’s true intentions, potentially leading to the theft of assets from compromised accounts.
Someone has gained access to the official OpenAI Newsroom X account.
This is now the 4th OpenAI X account to be compromised in the past 15 months.
Previous attacks on OpenAI executives
This incident is not an isolated event; OpenAI executives have been frequent targets of phishing schemes.
Recently, the account of OpenAI researcher Jason Wei was hacked to promote a similar scam, while Chief Scientist Jakub Pachocki and CTO Mira Murati have also fallen victim to cyberattacks.
In June 2023, Murati’s account was used in a comparable phishing scheme aimed at misleading users.
While these attacks share notable similarities, it remains unclear if a single group is behind them.
The situation is reflective of a broader issue affecting the cryptocurrency landscape.
Notably, Decentraland, a virtual reality project, recently suffered a similar attack where scammers promoted a fake airdrop of its native token, misleading users into connecting their wallets.
As phishing scams grow more sophisticated, attackers exploit high-profile platforms and the trust users place in established brands.
Security experts emphasize that the rise in approval phishing schemes presents an increasing threat within the crypto and blockchain sectors.
Despite the swift removal of the phishing posts, OpenAI has not issued an official statement regarding the hack, raising concerns given the company’s significant role in AI technology.
This lack of communication underscores the urgent need for enhanced security measures for high-traffic social media accounts.
With the prevalence of crypto-related phishing attacks on the rise, users must remain vigilant to protect themselves from falling prey to similar scams.
Strengthening cybersecurity protocols and educating users about the risks of approval phishing are vital steps in mitigating future losses.
The post Crypto scammers hijack OpenAI’s X account, target users with phishing links appeared first on Invezz
