Custom ChatGPTs push ClickFix attacks to deploy RAT malware
Custom ChatGPTs are used to trick users into downloading RAT malware via ClickFix attacks.
Threat actors are leveraging custom ChatGPT variants, promoted through sponsored Google ads, to lure users into downloading RAT malware. These malicious custom GPTs direct users to fake sites that employ ClickFix attacks, ultimately deploying a remote access trojan. The campaign, identified by Huntress, uses legitimate ChatGPT.com domain for malicious instructions, increasing its deceptive power.
AI summary of the linked source. Not reviewed by an editor. How this works
Run OpenAI?
Get an email when a new story names OpenAI, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThreat actors are weaponizing sponsored Google ads and custom ChatGPT variants to trick users into visiting malicious sites that deploy remote access trojan (RAT) malware via ClickFix social engineering techniques. The attack exploits user trust in the legitimate ChatGPT.com domain, making deception significantly harder to detect for the average user. ClickFix attacks typically instruct victims to manually run malicious commands under the guise of fixing a problem, bypassing many traditional security controls. This campaign highlights how AI brand recognition is now being actively weaponized to lower user suspicion and increase infection rates. Organizations without strong end-user training and ad-blocking controls are particularly exposed.
What helps against this
How we list vendors
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — RAT
- url — https://chat.openai.com/
- domain — sites.google.com