Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures
Threat actors are exploiting ChatGPT Custom GPTs to impersonate legitimate products and deliver remote access trojans through ClickFix lures.
Why it matters
This incident highlights a new abuse technique targeting AI platform features to deliver malware, increasing complexity for defenders monitoring AI-driven environments.
SOC impact
Investigate use of ChatGPT Custom GPTs related to your environment for potential impersonation attempts and delivery of ClickFix lures. Monitor for suspicious outbound connections and assess if RAT infections have occurred by correlating telemetry with known tactics used in these attacks.
Recommended actions
- Identify instances of ChatGPT Custom GPTs in use within the environment
- Review alerts and logs for suspicious access linked to AI platform tools
- Investigate network activity for connections to ClickFix-related domains
- Correlate endpoint telemetry for signs of remote access trojan presence
- Monitor user activity for interactions with suspicious AI-generated prompts or links
Executive Summary
In late September 2026, Huntress reported a novel attack technique involving threat actors abusing ChatGPT Custom GPTs to impersonate legitimate products. This approach leverages AI platform features to lure victims via ClickFix-themed content, resulting in the delivery of remote access trojans.
This development marks a shift in threat tactics by exploiting AI customization features as an infection vector. Security teams should therefore broaden monitoring and detection efforts to include AI platform activities, validate exposure to these techniques, and review network and endpoint telemetry to detect related malicious activity.
SOC Impact
Investigate use of ChatGPT Custom GPTs related to your environment for potential impersonation attempts and delivery of ClickFix lures. Monitor for suspicious outbound connections and assess if RAT infections have occurred by correlating telemetry with known tactics used in these attacks.
What SOC Teams Should Validate
- Identify instances of ChatGPT Custom GPTs in use within the environment
- Review alerts and logs for suspicious access linked to AI platform tools
- Investigate network activity for connections to ClickFix-related domains
- Correlate endpoint telemetry for signs of remote access trojan presence
- Monitor user activity for interactions with suspicious AI-generated prompts or links
Why It Matters
This incident highlights a new abuse technique targeting AI platform features to deliver malware, increasing complexity for defenders monitoring AI-driven environments.