ChatGPhish: Markdown Links in ChatGPT Enable Phishing Attacks
Researchers discovered that ChatGPT’s web‑summary renderer blindly trusts Markdown links and images from the source page, auto‑fetching them and displaying live, clickable elements without origin labels. This lets attackers turn any summarized web page into a phishing surface and harvest user data, extending prompt‑injection attacks beyond email.