Attackers weaponise ChatGPT Custom GPTs to deliver RAT via eight-stage ClickFix chain

Hackers exploit ChatGPT custom GPTs to launch ClickFix social engineering attacks

The exploitation of AI platforms for social engineering highlights the urgent need for enhanced security measures and stricter ad verification processes.

Hackers Use ChatGPT Custom GPTs in ClickFix Attacks

The personalized versions of ChatGPT were used to impersonate legitimate products and trick users into executing PowerShell commands.

Attackers weaponise ChatGPT Custom GPTs to deliver RAT via eight-stage ClickFix chain

Threat actors are abusing ChatGPT’s Custom GPT feature to funnel victims into a ClickFix attack that ends with a full-featured remote access trojan (RAT), according to new research from Huntress. The attackers created a Custom GPT titled “Plus 5.6”, designed to pass as a genuine ChatGPT model. Because Custom GPTs are hosted on chatgpt.com, the […]