Custom ChatGPT Models Used in Sophisticated RAT Malware Campaign
In September 2026, threat actors exploited OpenAI's custom ChatGPT feature to distribute remote access trojan (RAT) malware through ClickFix attacks. The attackers created malicious custom GPT models promoted via sponsored Google search results, directing users to fake Cloudflare verification pages that instructed victims to execute PowerShell commands. These commands deployed a sophisticated multi-stage infection chain involving legitimate signed applications and modified DLLs to establish persistent RAT access with capabilities for remote desktop control, surveillance, and additional payload deployment. The campaign affected dozens of users and demonstrated a novel abuse of AI platforms for malware distribution. This incident highlights the growing trend of threat actors weaponizing legitimate AI services and the increasing sophistication of social engineering attacks that leverage trusted platforms like ChatGPT and Google to bypass user skepticism and security controls.
Kill Chain
