New research from Barracuda finds that threat actors are now using OpenAI in identity theft campaigns targeting organizations around the world.

The attack uses an email that impersonates OpenAI and uses the convenient direct link – a textbook phishing technique – to send an “urgent message” to victims advising them to update their subscription payment information .