A convincing fake website is impersonating OpenAI’s ChatGPT download page and infecting visitors with malware designed to steal passwords, browser data, cryptocurrency wallets, and other sensitive information.
The site, openew[.]app, closely mimics OpenAI’s real ChatGPT download experience and offers what appear to be official desktop apps for both Windows and macOS. Instead, Windows users receive a credential-stealing malware loader, while Mac users get Odyssey Stealer, a fork of Atomic Stealer (AMOS), a well-known macOS malware family associated with cryptocurrency theft.
Read more…
Source: Malwarebytes Labs
Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox
Related:
- 13.3 million people’s medical data exposed; companies pay $300,000
November 9, 2026
The New York attorney general (AG) has reached a settlement over a medical data breach that affected 13.3 million people after basic security failures. Perry Johnson & Associates (PJ&A) and four related companies have agreed to pay $300,000 and implement extensive security reforms following a breach that exposed personal and medical information belonging to more than ...
- Norway’s aid agency pwned and all users’ data is stolen
November 5, 2026
Norway’s national aid agency, Norad, has confirmed that cyber criminals broke into its systems, stealing information about each and every registered user of its grant portal. Norad, which coordinates Norway’s assistance for foreign development, said that 20,614 registered individuals had their names and email addresses swiped, and information from at least three organizations’ applications was “misdirected.” The ...
- DOJ warns FBI data breach likely extends to Justice Department employees
November 4, 2026
A major data breach of FBI systems likely also affected staffers across the Justice Department, according to a memo obtained by POLITICO. FBI investigators determined in September that a hack of a bureau jobs portal was a “major” cyber incident, allowing hackers to steal personal information on thousands of FBI agents, including Social Security numbers, birth ...
- Qantas among list of major airlines impacted in global cyber security breach
November 2, 2026
Qantas and multiple other airlines have been targeted in a cyber security breach, with the Australian airline now working to determine what information was obtained. Client of Qantas, Spanish travel company Amadeus – which provides travel technology for global airlines, hire cars and hotels – was breached by an unauthorised agent, potentially accessing data about passenger ...
- North Korean hackers blamed for stealing record $6.3B in Binance breach
October 30, 2026
Hackers working for the North Korean regime have been blamed for a record cryptocurrency heist following a cyberattack at crypto exchange Binance. The hackers stole at least $6.3 billion in crypto from the company’s wallets, though about half of that amount was frozen as the stolen crypto traveled across various blockchains, according to security researchers. The ...
- Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat
October 28, 2026
GMO warned customers to back up data, disconnect devices, and shut down systems after a cyberattack. Attackers allegedly stole customer data, leaked information, and threatened ransomware deployment. Compromised trading-platform credentials and reports of unauthorized transactions raised concerns for affected users. Read more… Source: TechRadar News Sign up for the Cyber Security Review Newsletter The latest cyber security news and insights delivered ...