Attackers weaponise ChatGPT Custom GPTs to deliver RAT via eight-stage ClickFix chain

Threat actors are abusing the ChatGPT Custom GPT feature to execute ClickFix social engineering attacks. According to Huntress research, attackers created a Custom GPT named Plus 5.6 to impersonate a genuine model. This eight-stage chain funnels victims toward the installation of a full-featured remote access trojan (RAT). Because these GPTs are hosted on chatgpt.com, they appear trustworthy. This exploitation of AI platforms underscores an urgent need for stricter verification processes and enhanced security measures to protect users.