Source: thehackernews.com
Threat actors are abusing ChatGPT Custom GPTs by disguising them as legitimate product offerings to lure victims to malicious sites. These sites employ ClickFix lures to deliver Remote Access Trojans (RATs). The activity was observed by Huntress in late September 2026. This campaign represents a new abuse vector leveraging trusted AI platforms. It follows prior campaigns that also weaponized shared AI features for malicious purposes. The use of ClickFix social engineering techniques adds another layer of deception to trick users into executing malware. This highlights the growing risk of threat actors exploiting popular AI tools for malware distribution.
