Hackers are using OpenAI's own invitation system to phish employees

Tue, 30 Jun 2026 00:00:00 +0800

There’s a new phishing technique making the rounds, and this one is hard to spot because the emails come from OpenAI itself.

Security firm Push Security revealed Monday that hackers created a fake “Push Security Inc” organization on OpenAI’s platform and used the company’s own notification system to send invitation emails to Push Security employees. The emails arrive from noreply@tm.openai.com — a legitimate OpenAI address that passes standard email authentication checks.

Phishing on IT News

Hackers are using OpenAI's own invitation system to phish employees