Remote Access Trojan

Cybercriminals Exploit Custom GPTs to Execute ClickFix Attacks and Deploy Remote-Access Malware

A malicious campaign exploited custom versions of ChatGPT to direct users to fake pages asking them to run PowerShell commands, leading to the deployment of a remote-access Trojan. Huntress observed at least 40 connections to the malicious page, confirming two infections linked to a custom GPT.