Misuse1 sourceFirst seen
Thief GPT Plays Tic-Tac-Toe and Quietly Pockets Your Passwords
Ourtake
The publishing filter is itself an LLM, so it checked the vibes and waved the thief through.
What happened
A security researcher built a proof-of-concept custom GPT that posed as a tic-tac-toe game, asked users for personal information and secretly sent it to a third-party server via a hidden image. After OpenAI blocked publishing, a lightly reworded version was made available to other ChatGPT users by link. OpenAI closed the researcher's report as Not Applicable.