// ChatgptHIGH
Security firm Huntress confirmed an active malicious campaign exploiting ChatGPT's Custom GPT feature to lure users into remote access trojan (RAT) infections. Attackers created fake custom GPTs that redirected users to fake Cloudflare CAPTCHA screens hosted on Google Sites, using the ClickFix technique to trick users into executing malicious PowerShell commands. An eight-stage infection chain delivers a sophisticated RAT with capabilities including camera/microphone capture, screen broadcasting, and command-and-control communications via DNS-over-HTTPS. At least 40 related incidents were confirmed as of late September 2026.
- New Attack Vector Abuses ChatGPT Custom GPTs with Fake CAPTCHA t(opens in a new tab)
- Week in review: Researcher breaks into Microsoft analytics servi(opens in a new tab)
// Get alerts for Chatgpt