News
Cybersecurity firms targeted by fraudulent OpenAI organization invites
Publication date not yet evaluated · Added bleepingcomputer.com
Page published
Coverage timeline
Single-source incident — one report is available.
Why it matters
Attackers are abusing legitimate AI platform features like organization invites to harvest sensitive corporate data, turning enterprise LLM adoption into a new social-engineering vector.
Threat actors are creating OpenAI tenants impersonating legitimate companies and inviting employees to join them, aiming to trick targets into submitting sensitive company information through chats and projects. Cybersecurity firms have been among those targeted.