{"id":238024,"date":"2026-05-30T03:27:44","date_gmt":"2026-05-30T08:27:44","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/05\/chatgpt-share-links-abused-to-host-fake-outage-pages-to-deliver-malware"},"modified":"2026-05-30T03:27:44","modified_gmt":"2026-05-30T08:27:44","slug":"chatgpt-share-links-abused-to-host-fake-outage-pages-to-deliver-malware","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/05\/chatgpt-share-links-abused-to-host-fake-outage-pages-to-deliver-malware","title":{"rendered":"ChatGPT share links abused to host fake outage pages to deliver malware"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/chatgpt-share-links-abused-to-host-fake-outage-pages-to-deliver-malware.jpg\"><\/a><\/p>\n<p>Threat actors are abusing ChatGPT\u2019s content-sharing feature to display fake OpenAI outage pages that direct users to download malware disguised as the ChatGPT desktop application.<\/p>\n<p>The \u201cLLMShare\u201d campaign, discovered by <a href=\"http:\/\/pushsecurity.com\/blog\/llmshare-malvertising-campaign\" target=\"_blank\" rel=\"nofollow noopener\">Push Security<\/a>, uses Google ads to direct users searching for ChatGPT to a malicious shared ChatGPT page hosted on <a href=\"http:\/\/chatgpt.com\">chatgpt.com<\/a>, allowing the attack to be delivered through a legitimate OpenAI domain.<\/p>\n<p>Users who click the advertisement are taken to a legitimate ChatGPT shared page, but instead of seeing a chat conversation, they are presented with a rendered outage notice claiming the web version is unavailable and that they should download the desktop application instead.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Threat actors are abusing ChatGPT\u2019s content-sharing feature to display fake OpenAI outage pages that direct users to download malware disguised as the ChatGPT desktop application. The \u201cLLMShare\u201d campaign, discovered by Push Security, uses Google ads to direct users searching for ChatGPT to a malicious shared ChatGPT page hosted on chatgpt.com, allowing the attack to be [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,418,6],"tags":[],"class_list":["post-238024","post","type-post","status-publish","format-standard","hentry","category-cybercrime-malcode","category-internet","category-robotics-ai"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/238024","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=238024"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/238024\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=238024"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=238024"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=238024"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}