Executive Summary
Huntress observed attackers abusing ChatGPT Custom GPTs posing as legitimate products to send victims to ClickFix pages delivering a RAT.
What Happened
Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware. Huntress, which observed the activity in late September 2026, said it marks the abuse of yet another feature in trusted artificial intelligence (AI) platforms. Prior campaigns have weaponized shared
Affected Products
- OpenAI ChatGPT Custom GPTs
Vulnerability / Attack Technique
Abuse of trusted AI platform features as lures
Technical Mechanism
Custom GPTs direct users to malicious sites.
AI Security Category
AI-assisted attack
Part of the AI-Assisted Attacks topic.
RealGround Analysis
Trust in AI platforms is being borrowed for lures. RealGround analysis: users should not trust links just because a GPT gave them.
Recommended Controls
- Train users that Custom GPTs can be malicious
Related RealGround Service
AI CISO Advisory · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/09/attackers-abuse-chatgpt-custom-gpts-to.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.