SecurityBleepingComputerabout 1 hour ago
Malicious Custom GPTs Spread ClickFix RAT
4 min read
Attackers published custom ChatGPT variants, including one named Plus 5.6, that appeared in sponsored Google results and redirected users to a fake Cloudflare page. Victims ran a PowerShell command that installed a remote access trojan with camera, audio and file access. Huntress found 40 related incidents, confirmed two involving custom GPTs. OpenAI removed the first by September 25; a second was still active.
Level
Hype check
Tap to vote and see what everyone thinks.
