ChatGPT Enters Top 10 Most Impersonated Brands in Phishing Attacks for First Time
According to Check Point's Q2 2026 Brand Phishing Report, OpenAI's ChatGPT has entered the top ten list of most impersonated brands in phishing attacks for the first time, accounting for 1.1% of all attempts. This milestone indicates that cybercriminals are increasingly targeting popular AI tools to conduct credential theft and other malicious activities. The inclusion of ChatGPT highlights how AI platforms have become high-value targets for hackers, comparable to major tech giants and financial institutions. As AI tools integrate deeper into daily workflows, users face an increased risk of account compromise through fake AI service portals. Microsoft remains the most impersonated brand at 23%, followed by LinkedIn (11.6%), Google (6.7%), and Apple (5.8%). Security researchers warn that cybercriminals are sending phishing emails disguised as official OpenAI communications to trick users into revealing sensitive credentials.
## BACKGROUND
Brand phishing involves attackers impersonating well-known companies by copying their official websites, logos, and email templates to deceive victims. Check Point Research regularly tracks these trends to identify which platforms are most frequently exploited to steal personal data or credentials.