Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures
Attackers abuse ChatGPT Custom GPTs to deliver RATs via fake product lures.
Threat actors are exploiting ChatGPT Custom GPTs to impersonate legitimate offerings and lure victims to malicious sites. These sites use ClickFix lures to deliver malware, specifically a RAT, through a complex MSI installer chain involving DLL sideloading and shellcode execution. Huntress observed at least 40 users infected by this campaign.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Huntress?
Get an email when a new story names Huntress, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThreat actors created malicious ChatGPT Custom GPTs that impersonate legitimate tools, tricking users into visiting attacker-controlled sites that deploy ClickFix social engineering lures. Victims are manipulated into executing a complex MSI installer chain that leverages DLL sideloading and shellcode execution to install a Remote Access Trojan (RAT). This attack demonstrates how emerging AI platforms can be weaponized as a distribution vector when platform-level controls and user vigilance are insufficient. With at least 40 confirmed infections, the campaign highlights the real-world impact of combining AI-platform abuse with layered malware delivery techniques. Organizations must treat AI tool usage as an expanded attack surface requiring both technical controls and user education.
What helps against this
How we list vendors
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — ISOSimple.msi
- malware — COTFileReadApp.exe
- malware — ceiinfolog.dll
- malware — rdCore.dll
- malware — Common.Integrator.Preview.wav
- malware — monitor.raw