Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix

Reported 29 Sep 2026 by otx · Severity: medium

Threat actors are exploiting ChatGPT Custom GPTs and Google Sites to deliver remote access trojans through a sophisticated multi-stage attack chain. The campaign uses sponsored Google search results to direct victims to attacker-created Custom GPTs that impersonate legitimate Cha