[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fV5wqSsr0GX410NBgZEli3gAEjulu-AcvT0YH_ayWxis":3},{"article":4,"iocs":53,"watch_terms":72,"solutions":73,"lesson":162},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"37f93621-76c5-4a66-b2ed-f2d132485b39","Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures","attackers-abuse-chatgpt-custom-gpts-to-deliver-rat-via-clickfix-lures-72dbee","Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware. Huntress, which observed the activity in late September 2026, said it marks the abuse of yet another feature in trusted artificial intelligence (AI) platforms. Prior campaigns have weaponized shared","Threat actors are exploiting ChatGPT Custom GPTs to impersonate legitimate offerings and lure victims to malicious sites. These sites use ClickFix lures to deliver malware, specifically a RAT, through a complex MSI installer chain involving DLL sideloading and shellcode execution. Huntress observed at least 40 users infected by this campaign.","Attackers abuse ChatGPT Custom GPTs to deliver RATs via fake product lures.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fattackers-abuse-chatgpt-custom-gpts-to.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEj-E2KBc2Kl1xfsJ_ayeCwrbYODEJELskOif8C_YQFyt7DoGklZczzFD3IetvE9mFBUeQN9SQWCE41WtJA-NkE6dya1xAOznACZzeRCMRhvfSQaGipfmD-z1F2rWFPFGLvYSJwrfKhUrbdzwMc_b4OkpTA8huBozpABL2OBcxCM1cod7Hvr0eH23GgE1sEo\u002Fs1600\u002Fcustom-gpt.jpg","2026-09-30T15:00:15+00:00","2026-09-30T16:00:49.977787+00:00",8,[17,20,23,25,28],{"name":18,"type":19},"ChatGPT","product",{"name":21,"type":22},"Custom GPTs","technology",{"name":24,"type":22},"AI",{"name":26,"type":27},"Huntress","vendor",{"name":29,"type":19},"Cloudflare","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":30,"icon":32,"name":33,"slug":34},null,"Malware","malware",[36,41,46,48],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":42},{"id":43,"icon":32,"name":44,"slug":45},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":47},{"id":30,"icon":32,"name":33,"slug":34},{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[54,57,60,63,66,69],{"type":34,"value":55,"context":56},"ISOSimple.msi","Malicious MSI installer",{"type":34,"value":58,"context":59},"COTFileReadApp.exe","Legitimate Canon binary abused for DLL sideloading",{"type":34,"value":61,"context":62},"ceiinfolog.dll","Rogue DLL used in sideloading chain",{"type":34,"value":64,"context":65},"rdCore.dll","Unsigned DLL that extracts loader",{"type":34,"value":67,"context":68},"Common.Integrator.Preview.wav","WAV audio file containing encrypted payload",{"type":34,"value":70,"context":71},"monitor.raw","Encrypted file system containing trojan and persistence script",[26,18,29],{"controls":74,"vendors":158},[75,104,132],{"slug":76,"name":77,"problem":78,"products":79},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[80,88,96],{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"slug":105,"name":106,"problem":107,"products":108},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[109,116,124],{"vendor_slug":110,"vendor_name":29,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-email-security","Cloudflare Email Security","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Femail-security\u002F","Email filtering for phishing and business email compromise.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-email","Darktrace \u002F EMAIL","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Femail","Email security that flags messages deviating from normal communication patterns.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"abnormal","Abnormal AI","\u002Fvendor-logos\u002Fabnormal.png","abnormal-email-security","Abnormal Inbound Email Security","https:\u002F\u002Fabnormal.ai\u002F","API-based email security for Microsoft 365 and Google Workspace using behavioural models.",{"slug":133,"name":134,"problem":135,"products":136},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[137,144,151],{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":133,"product_name":141,"url":142,"description":143},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",{"vendor_slug":145,"vendor_name":26,"vendor_logo":146,"product_slug":147,"product_name":148,"url":149,"description":150},"huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":152,"vendor_name":153,"vendor_logo":154,"product_slug":152,"product_name":155,"url":156,"description":157},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",[159],{"slug":145,"name":26,"logo_path":146,"roles":160},[161],"reported_by",{"slug":163,"title":164,"body":165,"framework_refs":166,"framework_notes":178},"fake-chatgpt-custom-gpts-used-to-spread-remote-access-trojans-via-clickfix-lures","Fake ChatGPT Custom GPTs Used to Spread Remote Access Trojans via ClickFix Lures","Threat actors created malicious ChatGPT Custom GPTs that impersonate legitimate tools, tricking users into visiting attacker-controlled sites that deploy ClickFix social engineering lures. Victims are manipulated into executing a complex MSI installer chain that leverages DLL sideloading and shellcode execution to install a Remote Access Trojan (RAT). This attack demonstrates how emerging AI platforms can be weaponized as a distribution vector when platform-level controls and user vigilance are insufficient. With at least 40 confirmed infections, the campaign highlights the real-world impact of combining AI-platform abuse with layered malware delivery techniques. Organizations must treat AI tool usage as an expanded attack surface requiring both technical controls and user education.",[167,168,169,170,171,172,173,174,175,176,177],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 9: Email and Web Browser Protections","CIS Control 14: Security Awareness and Skills Training","CIS Control 18: Penetration Testing","NIST SP 800-53 SI-3: Malicious Code Protection","NIST SP 800-53 AT-2: Literacy Training and Awareness","NIST SP 800-53 CM-7: Least Functionality","NIST SP 800-53 AU-6: Audit Record Review, Analysis, and Reporting","MITRE ATT&CK T1218.007: Msiexec (System Binary Proxy Execution)","MITRE ATT&CK T1574.002: DLL Side-Loading","MITRE ATT&CK T1204.002: Malicious File (User Execution)",{}]