Executive Summary
Hackers used ChatGPT Custom GPTs impersonating legitimate products to trick users into running PowerShell commands in ClickFix attacks.
What Happened
The personalized versions of ChatGPT were used to impersonate legitimate products and trick users into executing PowerShell commands. The post Hackers Use ChatGPT Custom GPTs in ClickFix Attacks appeared first on SecurityWeek .
Affected Products
- OpenAI ChatGPT Custom GPTs
Vulnerability / Attack Technique
AI platform abuse for social engineering
Technical Mechanism
Custom GPTs guide users to run commands.
AI Security Category
AI-assisted attack
Part of the AI-Assisted Attacks topic.
RealGround Analysis
Trusted AI platforms are being used as lures.
Recommended Controls
- Train users never to run commands suggested by unknown GPTs
Related RealGround Service
AI Red Teaming · or start with the free AI Agent Security Scanner.
Sources
securityweek.com: https://www.securityweek.com/hackers-use-chatgpt-custom-gpts-in-clickfix-attacks/
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.