Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure
Malicious custom GPTs are being used to deliver malware via lures on OpenAI and Google domains.
Threat actors are leveraging custom GPTs within ChatGPT to distribute malware, mimicking tactics seen in previous campaigns like ClickFix. These malicious GPTs use legitimate domains from OpenAI and Google as lures to trick users into downloading malicious payloads, effectively turning the AI platform into a vector for Remote Access Trojan (RAT) delivery.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Google?
Get an email when a new story names Google, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThreat actors are abusing OpenAI's custom GPT functionality to craft convincing AI-powered lures that redirect users to malicious payloads, including Remote Access Trojans (RATs). By piggybacking on trusted domains from OpenAI and Google, attackers exploit the inherent trust users place in well-known platforms, making detection significantly harder. This mirrors social engineering tactics from campaigns like ClickFix, demonstrating how emerging AI tools rapidly become new attack surfaces. The core failure is a lack of user awareness around AI platform misuse combined with insufficient vetting controls for third-party custom GPTs. As AI adoption accelerates, organizations that do not educate users about AI-specific threat vectors will face increasing exposure.
What helps against this
How we list vendors- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.