CMMC
What Should Your Business Do When an AI Chat Asks You to Paste a Command?
Close it and call IT. No real website, chat or security check will ever ask you to paste a command into Windows. On October 8, 2026 an IT team reported on Reddit that a user's ChatGPT conversation showed a message signed "OpenAI Security Team" linking to a fake verification page that asked exactly that. The user tried twice, and endpoint protection stopped both attempts. The cause is unknown and nobody has claimed OpenAI was compromised. The lesson for a business is three layers: one rule your staff know, protection on every computer that can stop a bad command, and someone watching the alerts.
Capital Cyber. Sources are listed at the end of the article.
What Was Reported?
A user was turning a PowerPoint into investor material in ChatGPT. Partway through, a message in the chat said there was elevated automated traffic and a security check was needed. It linked to a page made to look like an OpenAI check, which copied a command to the clipboard and told the user to press Win + X, open Windows Terminal, paste and press Enter.
The user tried twice. Endpoint protection ended both attempts, and the team's security provider found no sign the program ever ran. The author does not know why the message appeared and lists prompt injection, other manipulation of the chat and an unsafe response as possibilities, none established. As of October 10, 2026 OpenAI had not commented, so treat the ChatGPT part as one team's report.
Is This a New Kind of Attack?
No. It is called ClickFix. Proofpoint wrote about it in November 2024 and Microsoft documented it in August 2025: a fake "verify you are human" or "fix this error" message talks the victim into pasting a command into Windows themselves. No virus sneaks in. The person lets it in.
What is new is where the message showed up: inside a tool staff already use and trust. That makes it feel official, which is the whole trick.
Which Layer Actually Stopped It?
The software on the computer. The user did everything the attacker asked, twice. Training did not catch it; the endpoint protection did. That is why we treat protection that can stop a malicious command, on every machine, as the floor for any business, not an extra.
The second half matters as much: someone saw the blocked attempts and checked that nothing ran. A tool that blocks quietly and is never reviewed leaves you not knowing whether the next attempt got through.
What Should Your Business Do This Week?
Tell every employee one sentence: no website, chat or security check will ever ask you to paste a command into Windows; if one does, close it and call IT. Put it in your next staff meeting and in writing.
Check that every computer, including the owner's laptop and the front desk PC, has protection that can block an unapproved command or program, and that someone reviews its alerts. Then write down which AI tools staff may use, and with what data. One page is enough.
What If Someone Already Pasted Something?
Disconnect the computer from the network, do not keep using it, and call your IT provider right away. Change passwords from a different, clean device. Do not wait to see what happens, and do not blame the person; this trick is built to fool careful people.
Frequently Asked Questions
4 QUESTIONSWas ChatGPT hacked?
Nobody has said so. The report's author states they are not claiming OpenAI was compromised and the cause is unknown. OpenAI had not commented as of October 10, 2026.
Will a real security check ever ask me to press Win + R or Win + X and paste?
No. That request is the attack. Close the page and call IT.
Do we need to stop using AI tools?
No. Approve specific tools for specific data, teach the one rule that no tool can tell staff to run a command, and keep protection on every computer.
What stopped the attack in this case?
Endpoint protection on the computer blocked both attempts, and the team's security provider confirmed nothing ran.
Sources
READ 2026-10-11- Reddit r/msp incident report, October 8, 2026
- Microsoft Security blog, Think before you Click(Fix), August 21, 2025
- Proofpoint, Security Brief: ClickFix Social Engineering Technique Floods Threat Landscape, November 18, 2024
This article explains the regulations and is not legal advice.
Talk it through in 30 minutes.
A call is a conversation, not a pitch. Tell us how your business runs and we will tell you what we would manage.
Looking for CMMC? Our Compliance Division, Capital Cyber Compliance, delivers it.
Under 25 people? Apply for an in-kind cybersecurity grant from Cyber Grants Alliance, a nonprofit. No cost to you.