Incident

Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures

Why it matters: Being on chatgpt.com does not make a Custom GPT trustworthy: this campaign used ones posing as real products to walk at least 40 people into pasting a ClickFix command that installed a remote access trojan.

Covered by 3 outlets

  • The Hacker News - Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures ()
  • BleepingComputer - Custom ChatGPTs push ClickFix attacks to deploy RAT malware ()
  • Dark Reading - Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure ()

Published

Start with real signal

See your security surface before you subscribe.

Run the complete AYAsec workflow on Free, then move to the cadence your team needs.

Start scanning free