Attackers have created custom versions of ChatGPT that appear in sponsored Google search results. When users interact with these malicious variants, they are redirected to websites that utilize ClickFix attack techniques to deploy RAT malware onto their systems. The campaign leverages the trust in ChatGPT branding to lure victims into executing malware.

Users who engage with these malicious ChatGPT variants risk having RAT malware installed on their devices. RATs can provide attackers with persistent remote access, potentially leading to data theft, system compromise, and further malicious activity. The threat exploits user trust and search engine advertising to spread malware.

No official patch or vendor advisory is available for this threat. Users should avoid interacting with ChatGPT variants found through sponsored or unverified search results. Security teams should educate users about the risks of downloading or interacting with unofficial AI chatbot versions and monitor for related malicious activity. Employing web filtering and endpoint protection solutions may help detect and block such threats.