---
title: "ChatGPT share links abused to host fake outage pages to deliver malware"
url: https://daily.dev/posts/chatgpt-share-links-abused-to-host-fake-outage-pages-to-deliver-malware-h2gq8yzz2
source_url: https://www.bleepingcomputer.com/news/security/chatgpt-share-links-abused-to-host-fake-outage-pages-to-deliver-malware
type: article
source: "BleepingComputer"
published: 2026-05-29T18:23:57.444Z
updated: 2026-05-29T18:24:21.575Z
tags: ["malware", "chatgpt", "phishing"]
reading_time: 3
upvotes: 1
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# ChatGPT share links abused to host fake outage pages to deliver malware

**[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 1 upvotes · 0 comments

## Summary

Threat actors are exploiting ChatGPT's content-sharing feature (chatgpt.com/s/ links) to host fake OpenAI outage pages via Google Ads, tricking users into downloading malware disguised as the ChatGPT desktop app. The 'LLMShare' campaign, discovered by Push Security, renders a convincing outage notice through ChatGPT's own HTML rendering capabilities, making the attack appear to originate from a legitimate OpenAI domain. Victims who click the download button are redirected to a cloaked site that serves macOS and Windows malware, likely infostealers. Similar abuse has been observed on Claude Artifacts and Grok, indicating a broader trend of attackers weaponizing AI platform sharing features.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.bleepingcomputer.com/news/security/chatgpt-share-links-abused-to-host-fake-outage-pages-to-deliver-malware>

---

Tags: [#malware](https://daily.dev/tags/malware), [#chatgpt](https://daily.dev/tags/chatgpt), [#phishing](https://daily.dev/tags/phishing)

[View this post on daily.dev](https://daily.dev/posts/chatgpt-share-links-abused-to-host-fake-outage-pages-to-deliver-malware-h2gq8yzz2)
