With the sheer popularity of ChatGPT, it's unsurprising to see a fake version
If you recently downloaded ChatGPT to your laptop, you might want to double-check what the app is called.
Security experts at Malwarebytes spotted the fraudulent website, dubbed openew.app, that looks almost indistinguishable from OpenAI's official ChatGPT download page. But if you visit the fake one, instead of getting the real app, you'll be stuck with malware designed to pinch passwords, browser data, and cryptocurrency wallets.
Both Windows and Mac users are at risk here, with the attackers serving up different malicious software depending on which operating system you're using. The fraudulent site appears completely legitimate, featuring the same branding and layout you'd expect from OpenAI.
So what exactly happens when you click that download button? Well, it depends on your device.
Windows users receive what looks like a normal installer, but it's actually a malware loader that quietly opens a connection to servers controlled by the attackers. This essentially gives hackers a backdoor into your machine.
On the other hand, Mac users are feeling the wrath of something called Odyssey Stealer, which is a variant of a well-known malware family linked to cryptocurrency theft. This nasty piece of software goes after browser passwords, cookies, Telegram sessions, and crypto wallet files.
Perhaps most worryingly, it also tries to swap out legitimate crypto Ledger and Trezor wallet applications with compromised versions that the attackers control.
With established software like Chrome or Photoshop, many users already know exactly where to find the official download. You'd normally go to Google or Adobe without thinking twice. With AI tools, this isn't the case yet.
Malwarebytes said, "AI tools are different because most users are still installing them for the first time, and that means relying on search results, ads, YouTube links, or social posts to find the download page. That creates an ideal environment for fake sites."
If you think you might have downloaded the fake app, you need to act fast.
First, grab a different device without the fake ChatGPT downloaded and sign out of all your important accounts using the "sign out everywhere" option. That means email, banking, cloud storage, GitHub, Discord, Telegram, and any crypto exchanges.
Next, change your passwords, starting with your main email account.
If you hold any cryptocurrency, move your funds immediately using a separate device. Mac users should avoid opening Ledger Live or Trezor Suite on the affected machine, as those apps may have been replaced.
It's important to keep a close eye on your bank accounts for any suspicious activity and consider reinstalling your operating system to ensure the safest recovery.