That OpenAI Invite in Your Inbox May Be a Trap

Researchers found a campaign dubbed Poisoned Tenant where attackers create fake OpenAI organizations impersonating real companies, then invite…

Here is what makes this attack so unsettling

This is not a clumsy phishing email with a typo-ridden link.

How the Poisoned Tenant scam actually works

Push Security calls it the Poisoned Tenant campaign, and the mechanics are simple enough to be repeatable.

So what is the attacker actually after?

This is where it gets murky, and honestly, more interesting.

Why the usual advice does not save you here

For years the security mantra has been simple: check the sender, look for the real domain, do not trust suspicious emails.

Get the full story

Read the complete breakdown, fixes and what happens next.