Hackers Abuse Google Sites to Host Fake OpenAI Codex Download Pages

Cybercriminals are using Google Sites to host fake download pages for OpenAI Codex, turning a familiar search into a malware trap. The campaign targets macOS users and relies on paid search placements to steer them toward a convincing but fraudulent installer page. The page does not simply deliver a harmful app. It tells visitors to copy a command, open Terminal, and run it themselves. That approach, known as ClickFix, shifts the final execution step to the victim and can bypass the suspicion normally raised by an unexpected download. Cato analysts identified the activity after tracking sponsored results for searches including “codex macos download.” Cato said in a report shared with Cyber Security News (CSN) that the...

Read the full article at the source.