MalwarePublished 29 Sep 2026

Custom ChatGPTs push ClickFix attacks to deploy RAT malware

Source Bleeping Computer

malware

Description

Malicious custom variants of OpenAI's ChatGPT are being promoted via sponsored Google search results. These variants direct users to websites that employ ClickFix attacks to deliver Remote Access Trojan (RAT) malware. This campaign targets unsuspecting users through deceptive search advertisements.

Impact

Users who engage with these malicious ChatGPT variants risk having RAT malware installed on their devices. RATs can provide attackers with persistent remote access, potentially leading to data theft, system compromise, and further malicious activity. The threat exploits user trust and search engine advertising to spread malware.

Defensive guidance

Users should avoid interacting with ChatGPT variants found through sponsored or unverified search results. Security teams should educate users about the risks of downloading or interacting with unofficial AI chatbot versions and monitor for related malicious activity. Employing web filtering and endpoint protection solutions may help detect and block such threats.

Summary

Attackers have created custom versions of ChatGPT that appear in sponsored Google search results. When users interact with these malicious variants, they are redirected to websites that utilize ClickFix attack techniques to deploy RAT malware onto their systems. The campaign leverages the trust in ChatGPT branding to lure victims into executing malware.

References

bleepingcomputer.com/news/security/custom-chatgpts-push-clickfix-attacks-to-deploy-rat-malware/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 29 Sep 2026, 21:21 UTC

References

Community reviews

Related threats