Push Security warns of a new phishing attack abusing OpenAI's organization invitation mechanism. Hackers create fake organizations using the target company's name, send official-looking invites from OpenAI's notification email, bypassing traditional security. They pre-link a valid Visa card and grant admin privileges to employees. The acceptance process lacks secondary verification, making it highly deceptive. Experts urge enterprises to extend security reviews to AI platform collaboration mechanisms.