A user on Reddit reported falling victim to a phishing scam that impersonated OpenAI Codex through a sponsored Google search result. The fake result led to a Google Pages-hosted site with malicious installation instructions, which, when executed, downloaded and ran a script from an external server. While the user has not yet found evidence of persistent malware on their system, they are concerned about potential data theft, including passwords, API tokens, and SSH keys. AI
IMPACT Highlights the risk of malicious actors impersonating AI tools via search engine ads, potentially leading to data theft.
RANK_REASON User reports a malicious tool impersonating a legitimate product.
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →
