- Crooks used Google Sites and stolen Google Ads accounts to push fake OpenAI Codex pages
- macOS users tricked into pasting Terminal commands, leading to AMOS infostealer infection
- Campaign abuses Google’s trust signals; Windows download button was a decoy, only Mac payload worked
Cybercriminals were seen abusing Google Sites, the Google ad network, and OpenAI’s good name, in a campaign that targets macOS users with infostealers.