A math-keyboard library, a YouTube callback and one share link opened ChatGPT accounts (parameter.ai)
The chain needed no phishing page. Opening a malicious public ChatGPT share, or clicking its Preview button, ran attacker code inside the victim's signed-in session and could read a private chat the attacker had never seen.
Commenters mostly argued about the price tag. Two founders said something different: the same firm had run unsolicited tests against their own companies.
Sign in to save