ChatGPT Atlas Mac malvertising campaign (11-26-2025)
- Description:Malicious Google Search ad for ChatGPT Atlas targeting Mac users
- Severity: Medium
- Reporter: Jérôme Segura
- Reported to Google: 11/26/2025
Google Search Ad
Traffic view
Decoy pages
Malicious script
IOCs
| Fake ChatGPT Atlas page | hxxps[://]sites[.]google[.]com/diemenwander[.]com/home/app |
| Fake ChatGPT Atlas page | hxxps[://]gptdsdsas[.]vercel[.]app/ |
| Malicious script | hxxps[://]tenkmo[.]com/gdrive |
| Payload URL | hxxps[://]tenkmo[.]com/drive/update |
| Payload SHA256 | b6a943ba800bee43e2b09a9377fd3a6b4188d53d1998352d107f49cd87484bf7 |