{"data":{"id":"e1971620-ac6a-40a7-ba0d-5504e655f59d","title":"Hackers Use ChatGPT Custom GPTs in ClickFix Attacks","summary":"A ClickFix campaign used two ChatGPT Custom GPTs to direct victims to a Google Sites page, where they were told to run a PowerShell command that downloaded a malicious MSI installer. Huntress reports at least 40 users were infected, at least two of them linked to a Custom GPT, and OpenAI removed the first Custom GPT on September 25 before a second was found on September 27.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://www.securityweek.com/hackers-use-chatgpt-custom-gpts-in-clickfix-attacks/","publishedAt":"2026-09-29T13:03:35.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["ChatGPT","Custom GPTs"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-09-29T13:03:35.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}