Attackers exploit ChatGPT Custom GPTs to deliver RAT malware via fake CAPTCHA and multi-stage lures
Multiple security outlets report that attackers are exploiting OpenAI's ChatGPT Custom GPT feature to distribute Remote Access Trojans (RATs). Malicious Custom GPTs are hosted on the legitimate chatgpt.com domain, luring unsuspecting users into installing malware. The attack typically involves a multi-stage process, sometimes referred to as an "eight-stage ClickFix chain," which can include fake CAPTCHA prompts to trick victims into downloading and executing the RAT. This method leverages the perceived legitimacy of the official ChatGPT platform to enhance the effectiveness of the social engineering attack. The reports detail the mechanism by which these custom GPTs act as an initial entry point for malware delivery.
11 articles from 11 outlets covered this story. No difference in framing or figures was found between them. The underlying claim is sourced from a press release.
What do all outlets agree on?
11 outlets covered “Attackers exploit ChatGPT Custom GPTs to deliver RAT malware via fake CAPTCHA and…”. All of them report the following:
- Attackers are exploiting ChatGPT's Custom GPT feature
- The goal is to deliver Remote Access Trojans (RATs)
- Malicious Custom GPTs are hosted on the official chatgpt.com website
- Users are tricked into installing malware
- The attack involves social engineering, often with fake CAPTCHA or multi-stage lures
Did outlets disagree about this?
No. All 11 outlets covering “Attackers exploit ChatGPT Custom GPTs to deliver RAT malware via fake CAPTCHA and…” reported it the same way — no difference in framing or figures was found between them.
Which outlets covered this?
All 11 articles found on this story, grouped by the stance of the piece. Every link goes to the original publisher.