PLUGIN STORE Antivirus alerting of dozens of URL SCAMS

ChatGPT
1

i searched for the best place to report this and oddly there is no where online telling where to do so.
So i hope this reaches someone who can do something about it.
my antivirus is aborting dozens of connections in the chatgpt plugin store.
here is some of them but there are many more. this is a security risk that should be addressed immediately.
(i tried to attach 5 of the screen shots but because im a new user it wont let me.-- funny i have been a user for a long time but just not posted -sigh-

here are some ocr extractions

@ Avast

Threat secured

We’ve safely aborted connection on openai-plugin.xweather.cagn because it
was infected with URL:Blac}

We can also protect you from other types of threats

UPGRADE YOUR PROTECTION CLOSE ALL (4)

Hide details ~
F— URL Blackist
URL A ——————
Process CAProgram Files\Google\Chrome\Application\chrome exe
Detected by Web Shield

Threat secured
We’ve safely aborted connection on chatgpt.surge.ai because it was infected
with URL:Blacklist 3

We’ve safely aborted connection on chatgptplugin.askchloe.app because it
was infected with URL:Blac}

the list goes on and on. several more but anyone at openai can scan for these. it would be nice if there was a more proactive approach to this type of security issue in place.

any additional help , just pm me.
thanks
sean

2

I have simar issue. For last day or two GPT Tab is slow and I tried to close the tab and open new a new one but it’s still acts weirdly. I scanned system with Bitdefender Plus and it found nothing but it blocked phishing pages attempt when I chatted with GPT.

Feature:
Online Threat Prevention

We blocked this phishing page for your protection:
https://chatgptplugin.askchloe.app/
Accessed by: brave.exe
Phishing pages attempt to obtain sensitive information such as login credentials or credit card details by disguising as trustworthy entities. The stolen data can be then used for financial gain.

Does anybody have any idea what it could be? Also I had to reinstall ScholarAI becuase it stopped working and the I had to confirm my email with a code for support AT pluginlab.ai. But I guess it’s normal because OpenAI changed something in plugins verification system? Am I correct?

3

Wow. This wasn’t on my ChatGPT plugins bingo card.

Do you get the same error when you try to load the page without the subdomain?

You can add the site to your whitelist. I’m interested to know why both BitDefender & Avast are blacklisting these sites/plugins. Truthfully I have never used a single plugin before besides the Wolfram when it first came out.

Phishing pages attempt to obtain sensitive information such as login credentials or credit card details by disguising as trustworthy entities. The stolen data can be then used for financial gain.

If true big yikes.

It could be because they are using “openai” or “chatgpt” in their URL?

4

Today after I got error message from ctfmon.exe that something tries to do Stack Overflow and it was blocked it convinced me that I can’t trust Bitdefender anymore.

I burned ISO ESET SysRescue (Bootble Ubuntu with Eset on board) and checked system again. There was some weird ghost.cmd file in Windows subfolder with random symbols. After I removed it, Windows 11 is running like a charm again.