Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix

Threat actors exploited ChatGPT's Custom GPT feature to impersonate legitimate models and lure victims via sponsored Google ads to malicious Custom GPTs named 'Plus 5.6'. Victims were shown fake service notices and redirected to Google Sites hosting ClickFix lures disguised as CloudFlare CAPTCHA checks. They were tricked into running PowerShell commands that downloaded malicious MSI installers. The attack used DLL sideloading with legitimate Canon- and Stardock-signed executables to establish persistence via registry Run keys and scheduled tasks. The multi-stage infection involved obfuscated scripts, encrypted payloads hidden in WAV files and NuGet packages, and deployed a remote access trojan with capabilities including remote desktop access, browser hijacking, credential theft, and follow-on payload delivery. Approximately 40 incidents were investigated by Huntress.

• Beyond the clipboard: The evolving tradecraft of ClickFixMalware2026-11-10
• Fake Zillow pages use ClickFix NetSupport RAT to target apartment huntersMalware2026-11-13
• Remcos RATMalware2026-11-06
• 2026-11-12: SmartApeSG ClickFix campaign pushes CNCmachineRMS RATMalware2026-11-13
• Inside Phexia: A macOS malware delivered through ClickFixMalware2026-11-05