Como reconocer Fake ChatGPT download site spreads Odyssey Stealer and Windows credential malware?

TLDR

A convincing clone of OpenAI's ChatGPT download page at openew[.]app is tricking Windows and Mac users into installing info stealing malware. The site mirrors OpenAI's branding, dark theme, and download buttons, then serves platform...

Como funciona

Señales de alerta

Domain mimics but is not openai.com or chatgpt.com (here openew[.]app ). Unsigned installer delivered as a raw .exe or .dmg from a non official site. Fake password prompts or CAPTCHAs appearing right after launching the app

Qué hacer

1Only download ChatGPT from chatgpt.com/download or the official Microsoft Store. Never enter your system or wallet password into a prompt triggered by a downloaded app. If you ran the installer, disconnect from the network, change all sto

Fuente

malwarebytes

Fuente verificada por Mythos Forensic Team

https://www.malwarebytes.com/blog/threat-intel/2026/05/fake-chatgpt-download-site-infects-windows-and-mac-users-with-malware

FAQ

Es Fake ChatGPT download site spreads Odyssey Stealer and Windows credential malware una estafa real?

Si. Trata el mensaje, la llamada o la solicitud de pago como sospechosos hasta que los verifiques por un canal oficial.

Cuales son las primeras senales?

Domain mimics but is not openai.com or chatgpt.com (here openew[.]app ). Unsigned installer delivered as a raw .exe or .dmg from a non official site. Fake password prompts or CAPTCHAs appearing right after launching the app

Que debo hacer primero?

Only download ChatGPT from chatgpt.com/download or the official Microsoft Store. Never enter your system or wallet password into a prompt triggered by a downloaded app. If you ran the installer, disconnect from the network, change all sto

Puede LegalAudit revisar mi caso?

Si. Abre el chat gratis y pega el mensaje, el enlace, el remitente o los datos de pago para un triage.