Attackers used ChatGPT Custom GPTs named Plus 5.6 to deliver a RAT via an eight-stage ClickFix chain

Threat actors abused ChatGPT Custom GPTs on OpenAI's chatgpt.com domain, impersonating a model named "Plus 5.6," and steered victims into a ClickFix attack that installed a remote access trojan. Huntress, which published the research on September 28, 2026, said its operations center had responded to at least 40 incidents tied to the campaign's Google Sites page, and that two of those infections were confirmed to have started at an attacker-built Custom GPT.