[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkEp8qJwJe0zcy2qbGQyI0zkRtra6aN1cqXzkVkabXzY":3},{"article":4,"iocs":54,"watch_terms":59,"solutions":60,"lesson":149},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"e9f2ccdd-2d67-4feb-8248-5d82bca01dd6","Attackers weaponise ChatGPT Custom GPTs to deliver RAT via eight-stage ClickFix chain","attackers-weaponise-chatgpt-custom-gpts-to-deliver-rat-via-eight-stage-clickfix--dd49ce","Threat actors are abusing ChatGPT’s Custom GPT feature to funnel victims into a ClickFix attack that ends with a full-featured remote access trojan (RAT), according to new research from Huntress. The attackers created a Custom GPT titled “Plus 5.6”, designed to pass as a genuine ChatGPT model. Because Custom GPTs are hosted on chatgpt.com, the […] The post Attackers weaponise ChatGPT Custom GPTs to deliver RAT via eight-stage ClickFix chain appeared first on IT Security Guru.","Threat actors are leveraging ChatGPT's Custom GPT feature to distribute a sophisticated remote access trojan (RAT) through an eight-stage ClickFix attack chain. The campaign uses a fake GPT named 'Plus 5.6' hosted on OpenAI's domain, luring victims to a Google Sites page that prompts them to run a PowerShell command. This command initiates a multi-stage process involving obfuscated scripts, a malicious MSI, and a sideloaded DLL that ultimately deploys the RAT, which boasts extensive capabilities including remote desktop access and data exfiltration.","Attackers use ChatGPT Custom GPTs to deliver RAT via ClickFix chain.","https:\u002F\u002Fwww.itsecurityguru.org\u002F2026\u002F09\u002F29\u002Fattackers-weaponise-chatgpt-custom-gpts-to-deliver-rat-via-eight-stage-clickfix-chain\u002F?utm_source=rss&utm_medium=rss&utm_campaign=attackers-weaponise-chatgpt-custom-gpts-to-deliver-rat-via-eight-stage-clickfix-chain","https:\u002F\u002Fwww.itsecurityguru.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FChatGPT-Image-Sep-29-2026-11_41_45-AM.png","2026-09-29T10:44:36+00:00","2026-09-29T12:00:26.94147+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"ChatGPT","product",{"name":21,"type":22},"OpenAI","vendor",{"name":24,"type":19},"Custom GPTs",{"name":26,"type":19},"Google Sites",{"name":28,"type":19},"Cloudflare",{"name":30,"type":19},"Canon CaptureOnTouch","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":31,"icon":33,"name":34,"slug":35},null,"Malware","malware",[37,42,47,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":48},{"id":31,"icon":33,"name":34,"slug":35},{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55],{"type":56,"value":57,"context":58},"url","https:\u002F\u002Fwww.huntress.com\u002Fblog\u002Fchatgpt-custom-gpts-clickfix-rat","Huntress blog with full technical analysis and IOCs",[21,18,24],{"controls":61,"vendors":145},[62,88,117],{"slug":63,"name":64,"problem":65,"products":66},"application-allowlisting","Application allowlisting","Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.",[67,75,83],{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"airlock-digital","Airlock Digital","\u002Fvendor-logos\u002Fairlock-digital.png","airlock-allowlisting","Airlock Allowlisting and Execution Control","https:\u002F\u002Fwww.airlockdigital.com\u002F","Blocks anything not explicitly trusted from running, with tools to build and keep the trusted list current as software changes.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","allowlisting","Allowlisting","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fallowlisting","Blocks any software that has not been approved, including ransomware and unapproved remote-access tools. A learning period builds the approved list first.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":84,"product_name":85,"url":86,"description":87},"ringfencing","Ringfencing","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fringfencing","Limits what approved applications may do, such as which files, network locations and other programs they can reach, so a compromised application cannot be turned against you.",{"slug":89,"name":90,"problem":91,"products":92},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[93,101,109],{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"slug":118,"name":119,"problem":120,"products":121},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[122,130,138],{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","core-email-protection","Proofpoint Core Email Protection","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-protection","Email filtering for phishing, malware and business email compromise.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-email","Darktrace \u002F EMAIL","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Femail","Email security that flags messages deviating from normal communication patterns.",{"vendor_slug":139,"vendor_name":28,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-email-security","Cloudflare Email Security","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Femail-security\u002F","Email filtering for phishing and business email compromise.",[146],{"slug":102,"name":103,"logo_path":104,"roles":147},[148],"reported_by",{"slug":150,"title":151,"body":152,"framework_refs":153,"framework_notes":166},"fake-chatgpt-custom-gpt-delivers-rat-via-eight-stage-clickfix-attack","Fake ChatGPT Custom GPT Delivers RAT via Eight-Stage ClickFix Attack","Threat actors are abusing the trust users place in legitimate platforms — ChatGPT and Google Sites — to disguise a sophisticated malware delivery chain. By hosting a malicious Custom GPT on OpenAI's own domain, attackers exploit perceived legitimacy to trick victims into voluntarily executing a PowerShell command, bypassing technical controls through social engineering. The eight-stage chain uses obfuscation, DLL sideloading, and MSI abuse to evade detection and deploy a fully featured RAT. This attack demonstrates that platform trust is not a security guarantee, and that end-user awareness of command-execution prompts is a critical last line of defence.",[154,155,156,157,158,159,160,161,162,163,164,165],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 9: Email and Web Browser Protections","CIS Control 10: Malware Defenses","CIS Control 14: Security Awareness and Skills Training","CIS Control 17: Incident Response Management","NIST SP 800-53 SI-3: Malicious Code Protection","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 AT-2: Literacy Training and Awareness","NIST SP 800-53 SC-18: Mobile Code","MITRE ATT&CK T1059.001: PowerShell","MITRE ATT&CK T1574.002: DLL Side-Loading","MITRE ATT&CK T1566: Phishing \u002F Social Engineering",{}]