A Fake Security Check Inside ChatGPT: What a Blocked Attack Means for Your CMMC Evidence
An IT team reported that a ChatGPT conversation sent a user to a fake verification page and a paste-a-command trap. Endpoint protection stopped it twice. For a CMMC program, the interesting part comes after the block: what you record, and what your controls say about AI tools.
In This Article
What Was Reported?
On October 8, 2026, an IT administrator at a managed service provider posted an incident to Reddit's r/msp forum. A user was working in ChatGPT on a PowerPoint. A message in the chat claimed elevated automated traffic and demanded a security check. It was signed “OpenAI Security Team” and linked to a page imitating an OpenAI verification service.
The page copied a command to the clipboard and told the user to press Win + X, open Windows Terminal, paste and press Enter. The user tried twice. Endpoint protection stopped both attempts, and the provider found no sign the payload ran.
One Rule
No legitimate website, CAPTCHA or security check asks you to paste a command into Windows. If one does, stop and call IT.
What Is Still Unknown?
The author does not know why the message appeared inside ChatGPT. Prompt injection, other manipulation of the conversation and an unsafe response were all listed as possibilities, and none was established. The author is not claiming OpenAI was compromised. OpenAI has not commented as of October 10, 2026. Treat the ChatGPT detail as one unconfirmed report.
The trap is not new. It is called ClickFix. Proofpoint wrote about it in November 2024 and Microsoft documented it in August 2025. A fake verification or error message talks the victim into pasting a command into the Run box or a terminal.
Does a Blocked Attack Belong in Your Incident Records?
In most programs, yes. Two Level 2 requirements are in play. IR.L2-3.6.1 asks for an operational incident handling capability, covering detection, analysis, containment and recovery. IR.L2-3.6.2 asks you to track, document and report incidents.
A blocked attempt that reached a user is a useful test of that capability. Whether it counts as a reportable incident is a call you make against your own incident response plan. Either way, write it down:
- What the user saw, and when.
- What stopped it, and which alert fired.
- Who was told, and what the follow-up was.
That record is the evidence an assessor looks for: the process runs on real events, not only on paper. It also leans on the malicious code protection requirement, SI.L2-3.14.2, and the audit logging requirement, AU.L2-3.3.1, since the alert has to exist before anyone can record it.
Where Does an AI Tool Fit in Your Controls?
CMMC has no control named for AI. But your System Security Plan has to describe where CUI goes, and an AI assistant is one more place staff can paste or upload a file. Write down which tools are allowed, with what data, and what staff do when a tool asks for something odd. CM.L2-3.4.9, which covers user-installed software, is a natural home for the list of approved tools.
This is a design choice, not a quote from the rule. The point is that the plan and the real behavior match.
What Should Training Say?
Add the rule above to your security awareness training, in plain words, and add the example. People trust what appears in a tool they use every day, so tell them that trust does not cover a request to paste a command. Keep the dated training record, since that is the evidence for AT.L2-3.2.1.
Is Your Incident Process Ready for a Real Event?
CMMC Ready Now can check whether your incident records and AI tool rules would hold up in front of an assessor.
Book a Call with RickFrequently Asked Questions
Was OpenAI breached?
Nobody has said so. The author of the report states they are not claiming OpenAI was compromised, and the cause of the message is unknown. OpenAI has not commented as of October 10, 2026.
Does a blocked attack have to be recorded for CMMC?
IR.L2-3.6.1 requires an operational incident handling capability, and IR.L2-3.6.2 requires you to track, document and report incidents. Whether a blocked attempt counts as a reportable incident is a judgment you make against your own incident response plan. Recording it as a security event is the safe habit, because it gives an assessor evidence that the process runs.
Do we need a written policy for AI tools?
CMMC does not have a control called AI policy. But your System Security Plan has to describe the systems and services that touch CUI, and an AI assistant is one more place staff can paste or upload data. Writing down which tools are allowed and with what data keeps the plan and the real behavior in agreement.
What is ClickFix?
A social engineering technique where a fake verification or error message talks the victim into pasting a command into the Windows Run box or a terminal. Microsoft documented it in August 2025 and Proofpoint in November 2024.
Sources
- Reddit r/msp incident report, October 8, 2026 (reddit.com)
- Microsoft Security blog, Think before you Click(Fix), August 21, 2025 (microsoft.com)
- Proofpoint, ClickFix security brief, November 18, 2024 (proofpoint.com)
- NIST SP 800-171 Rev. 2 (csrc.nist.gov)