[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkXUJRbXJqHz89gx7TxpUMSb0o9XU8zR-HaUkFBZqb2I":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":131},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"9517c1ed-2646-4f2f-8b39-f5caa532e0a8","Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure","malicious-custom-gpts-turn-chatgpt-into-rat-delivery-lure-298d89","In yet another ClickFix-style campaign, threat actors abuse legitimate domains from OpenAI and Google to fool unsuspecting users.","Threat actors are leveraging custom GPTs within ChatGPT to distribute malware, mimicking tactics seen in previous campaigns like ClickFix. These malicious GPTs use legitimate domains from OpenAI and Google as lures to trick users into downloading malicious payloads, effectively turning the AI platform into a vector for Remote Access Trojan (RAT) delivery.","Malicious custom GPTs are being used to deliver malware via lures on OpenAI and Google domains.","https:\u002F\u002Fwww.darkreading.com\u002Fcyberattacks-data-breaches\u002Fmalicious-custom-gpts-chatgpt-rat-delivery-lure","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt38e8d6d5f0f61c59\u002F6abd6454845395465ad1a6df\u002Frat-GlobalP-GettyImages-1413873422.jpg?width=720&quality=80&disable=upscale","2026-09-30T21:25:47+00:00","2026-09-30T22:00:26.509261+00:00",7,[17,20,23,25],{"name":18,"type":19},"ChatGPT","product",{"name":21,"type":22},"OpenAI","vendor",{"name":24,"type":22},"Google",{"name":26,"type":27},"ClickFix","campaign","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":28,"icon":30,"name":31,"slug":32},null,"Malware","malware",[34,39,44],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":40},{"id":41,"icon":30,"name":42,"slug":43},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":45},{"id":46,"icon":30,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[24,21,18],{"controls":52,"vendors":130},[53,82,107],{"slug":54,"name":55,"problem":56,"products":57},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"slug":43,"name":83,"problem":84,"products":85},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[86,94,102],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":103,"product_name":104,"url":105,"description":106},"boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"slug":108,"name":109,"problem":110,"products":111},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[112,117,124],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":113,"product_name":114,"url":115,"description":116},"managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":108,"product_name":121,"url":122,"description":123},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":125,"product_name":126,"url":128,"description":129},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",[],{"slug":132,"title":133,"body":134,"framework_refs":135,"framework_notes":148},"malicious-custom-gpts-used-to-deliver-remote-access-trojans","Malicious Custom GPTs Used to Deliver Remote Access Trojans","Threat actors are abusing OpenAI's custom GPT functionality to craft convincing AI-powered lures that redirect users to malicious payloads, including Remote Access Trojans (RATs). By piggybacking on trusted domains from OpenAI and Google, attackers exploit the inherent trust users place in well-known platforms, making detection significantly harder. This mirrors social engineering tactics from campaigns like ClickFix, demonstrating how emerging AI tools rapidly become new attack surfaces. The core failure is a lack of user awareness around AI platform misuse combined with insufficient vetting controls for third-party custom GPTs. As AI adoption accelerates, organizations that do not educate users about AI-specific threat vectors will face increasing exposure.",[136,137,138,139,140,141,142,143,144,145,146,147],"CIS Control 3: Data Protection","CIS Control 9: Email and Web Browser Protections","CIS Control 14: Security Awareness and Skills Training","CIS Control 18: Penetration Testing","NIST SP 800-53 AT-2: Security Awareness Training","NIST SP 800-53 SI-3: Malicious Code Protection","NIST SP 800-53 SC-7: Boundary Protection","NIST CSF PR.AT-1: Awareness and Training","NIST CSF DE.CM-1: Continuous Monitoring","MITRE ATT&CK T1566: Phishing","MITRE ATT&CK T1059: Command and Scripting Interpreter","ISO\u002FIEC 27001 A.7.2.2: Information Security Awareness",{}]