[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJO3AdRNbZsEC48jexvWs6kSv1K9jOJlQL52vlNtLlC4":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":24,"status":25,"created_at":26,"published_at":27,"article":28,"tags":32,"podcasts":51,"controls":58},"b17bd63c-819c-4a24-a94a-3402e1dbc66a","fake-chatgpt-custom-gpt-delivers-rat-via-eight-stage-clickfix-attack","e9f2ccdd-2d67-4feb-8248-5d82bca01dd6","Fake ChatGPT Custom GPT Delivers RAT via Eight-Stage ClickFix Attack","Threat actors are abusing the trust users place in legitimate platforms — ChatGPT and Google Sites — to disguise a sophisticated malware delivery chain. By hosting a malicious Custom GPT on OpenAI's own domain, attackers exploit perceived legitimacy to trick victims into voluntarily executing a PowerShell command, bypassing technical controls through social engineering. The eight-stage chain uses obfuscation, DLL sideloading, and MSI abuse to evade detection and deploy a fully featured RAT. This attack demonstrates that platform trust is not a security guarantee, and that end-user awareness of command-execution prompts is a critical last line of defence.","**Immediate actions:**\n- Block or restrict PowerShell execution for standard users via Group Policy or endpoint management tools.\n- Enforce application control policies (e.g., AppLocker or WDAC) to prevent unsigned MSI and DLL execution.\n\n**Security awareness measures:**\n- Train users to never copy-paste or execute terminal\u002FPowerShell commands prompted by a website, AI tool, or chatbot, regardless of how trusted the platform appears.\n- Publish internal guidance specifically warning staff about ClickFix-style social engineering lures that masquerade as legitimate AI services.\n\n**Detection measures:**\n- Deploy endpoint detection and response (EDR) tooling with rules to alert on suspicious PowerShell execution chains, MSI installs from temp directories, and DLL sideloading patterns.\n- Monitor outbound network traffic for C2 beacon patterns and flag connections initiated by sideloaded or unsigned DLLs.",[12,13,14,15,16,17,18,19,20,21,22,23],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 9: Email and Web Browser Protections","CIS Control 10: Malware Defenses","CIS Control 14: Security Awareness and Skills Training","CIS Control 17: Incident Response Management","NIST SP 800-53 SI-3: Malicious Code Protection","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 AT-2: Literacy Training and Awareness","NIST SP 800-53 SC-18: Mobile Code","MITRE ATT&CK T1059.001: PowerShell","MITRE ATT&CK T1574.002: DLL Side-Loading","MITRE ATT&CK T1566: Phishing \u002F Social Engineering",{},"published","2026-09-29T12:21:55.204208+00:00","2026-09-29T12:21:55.079+00:00",{"id":7,"url":29,"slug":30,"title":31},"https:\u002F\u002Fwww.itsecurityguru.org\u002F2026\u002F09\u002F29\u002Fattackers-weaponise-chatgpt-custom-gpts-to-deliver-rat-via-eight-stage-clickfix-chain\u002F?utm_source=rss&utm_medium=rss&utm_campaign=attackers-weaponise-chatgpt-custom-gpts-to-deliver-rat-via-eight-stage-clickfix-chain","attackers-weaponise-chatgpt-custom-gpts-to-deliver-rat-via-eight-stage-clickfix--dd49ce","Attackers weaponise ChatGPT Custom GPTs to deliver RAT via eight-stage ClickFix chain",[33,39,45],{"id":34,"name":35,"slug":36,"description":37,"color":38},"1732a005-556e-411c-a9db-5edec3058571","Logging & Monitoring","logging-monitoring","Missing logs, no alerting, blind spots","#a855f7",{"id":40,"name":41,"slug":42,"description":43,"color":44},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",{"id":46,"name":47,"slug":48,"description":49,"color":50},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",[52],{"id":53,"date":54,"edition":55,"title":56,"audio_url":57},"9f82c4db-f3c8-464f-a72e-ba9eda19ade4","2026-09-29","afternoon","ThreatNoir Afternoon Brief — September 29","https:\u002F\u002Fcdn.threatnoir.com\u002Fpodcasts\u002F2026-09-29\u002Fthreatnoir-afternoon-brief-2026-09-29.mp3",[59,63,67],{"slug":60,"name":61,"problem":62},"application-allowlisting","Application allowlisting","Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.",{"slug":64,"name":65,"problem":66},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":68,"name":69,"problem":70},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes."]