Hackers Give ChatGPT Users 48 Hours to “Update Payment” in Credential-Stealing Phishing Attack