Comment by big-chungus4

How does he know that this attack is performed by OpenAI agents? I couldn't figure this out from the article