It’s unclear from the article because it does not directly state the vector of attack, just the tools used. But it looks like this is not a breach of OpenAI sys

It’s unclear from the article because it does not directly state the vector of attack, just the tools used. But it looks like this is not a breach of OpenAI systems, and instead is the product of malware on user machines that happened pickup ChatGPT credentials, among any other things it deemed valuable on the user’s machines. Is this a correct understanding?