OpenAI’s X account fell victim to yet another cybersecurity breach on September 23.
But, here’s the kicker: This marks the fourth such attack on OpenAI-related X accounts since June 2023 and the fifth cybersecurity incident overall since January 2023.
So, what’s going on with their cybersecurity?
This time the hackers infiltrated the platform to push a suspected phishing scam. The hackers promoted fake “OPENAI” tokens, enticing ChatGPT users to claim them under the guise of bridging AI and blockchain technologies.
The breach was flagged by vigilant X users around 10:26 pm UTC on Sept. 23. Screenshots quickly surfaced showing the account promoting the token as part of an “initial supply” to lure users with promises of access to future OpenAI beta programs. A known tactic in phishing schemes, the hackers even turned off comments to prevent warnings from spreading.
Also Read: OpenAI’s Success Story: A Million Paid Users
Despite this widespread issue, neither OpenAI nor CEO Sam Altman have publicly commented on the hack, though all malicious posts have since been deleted. Grok developer Benjamin De Kraker was among the first to call out the attack, bluntly stating that the official OpenAI Newsroom account was “shilling fake shitcoins.”
The phishing link led users to a suspicious website flagged with a security warning, giving users the option to proceed despite the risks. This incident mirrors similar hacks that struck OpenAI’s CTO Mira Murati, Chief Scientist Jakub Pachocki, and researcher Jason Wei in June and September 2024.
To add to OpenAI’s growing cybersecurity woes, a hacker also breached an internal forum in early 2023, accessing proprietary data, confidential communications, and employee information. Fortunately, the hackers were unable to access OpenAI’s core systems.
Tanishq Mathew Abraham, CEO of the Medical AI Research Center, criticized OpenAI for these repeated breaches, urging them to adopt more robust security measures like two-factor authentication.
The recurring hacks are a stark reminder that even tech giants aren’t immune to digital vulnerabilities.