Malicious GPT Can Phish Credentials and Exfiltrate Them to an External Server