Threat actors exploited ChatGPT's Custom GPT feature to impersonate legitimate models and lure victims via sponsored Google ads to malicious Custom GPTs named 'Plus 5.6'. Victims were shown fake service notices and redirected to Google Sites hosting ClickFix lures disguised as CloudFlare CAPTCHA checks. They were tricked into running PowerShell commands that downloaded malicious MSI installers. The attack used DLL sideloading with legitimate Canon- and Stardock-signed executables to establish persistence via registry Run keys and scheduled tasks. The multi-stage infection involved obfuscated scripts, encrypted payloads hidden in WAV files and NuGet packages, and deployed a remote access trojan with capabilities including remote desktop access, browser hijacking, credential theft, and follow-on payload delivery. Approximately 40 incidents were investigated by Huntress.