Breaking

Attackers Use ChatGPT Custom GPTs to Push ClickFix RAT Malware, Huntress Says

September 30, 2026 at 11:11 EDT

Security
AI Agents

Attackers are abusing ChatGPT Custom GPTs as a trusted-looking front door for a ClickFix malware campaign that ends in a remote access trojan, according to Huntress research. The security firm said it investigated at least 40 related incidents tied to the campaign's Google Sites lure, including two confirmed infections that began through a Custom GPT.

Sep. 2026 · AI security

Custom GPTs became a malware entry point

Attackers used sponsored search, a fake ChatGPT-like Custom GPT and a fake CAPTCHA page to push users into running PowerShell and installing a remote access trojan.

40+

related incidents investigated

confirmed Custom GPT infections

stages in the chain

1.58 MB

final RAT shellcode

Incident scale

40+related incidents

2confirmed via Custom GPT

The broader lure produced dozens of cases; a smaller confirmed subset began inside the Custom GPT flow.

The attack path

Sponsored search

A paid result increased trust and visibility.

Custom GPT

The bot sent users to a backup page.

Fake CAPTCHA

The page asked users to paste a command.

RAT install

PowerShell launched the malware chain.

What stood out

The campaign relied on recognizable services and signed software to make each step look less suspicious.

Practical warning

A real CAPTCHA or AI chat should not require PowerShell, Terminal, Command Prompt or Run dialog commands.

Continue reading

The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.