{"data":{"id":"eee84cd5-591c-403b-a90b-9163d321a992","title":"Custom ChatGPTs push ClickFix attacks to deploy RAT malware","summary":"Malicious custom variants of ChatGPT, promoted through sponsored Google results, directed users to sites using ClickFix attacks to deliver malware. Huntress identified the campaign, which it says affected dozens of users, and found that only two of at least 40 related incidents involved a custom GPT. The payload is a remote access trojan that establishes persistence through a Run key and a scheduled task, both named 'Canon Configuration Reader.'","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://www.bleepingcomputer.com/news/security/custom-chatgpts-push-clickfix-attacks-to-deploy-rat-malware/","publishedAt":"2026-09-29T20:59:39.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["ChatGPT","custom GPTs","Google Sites"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-09-29T20:59:39.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}