A phishing email for ChatGPT wouldn’t tell you to “please refrain from entering sensitive information when using the tool”, right? If it was a scam, why would they encourage good online safety behavior – except that’s exactly what happened. This real-life scam imitated a work email to give it credibility but pushed users to download a browser extension as a work benefit. And that’s where it goes downhill.

Help employees learn the importance of treating browser extensions like any other app and run it by IT before downloading anything.