Hackers abuse custom GPTs to execute ClickFix malware attacks
Cybersecurity researchers discovered that attackers are using custom GPTs to deliver remote access trojan malware to users through fake error prompts.
FTMQ Security, written by our newsroom0 views
Hackers are abusing custom GPTs to deliver remote access trojan malware through ClickFix social engineering attacks. IBM reported that researchers at cybersecurity firm Huntress identified the ongoing campaign. [1]
The ClickFix technique tricks target users into taking actions by presenting fake technical errors or verification prompts. IBM said that attackers are now leveraging trusted artificial intelligence platforms as a new delivery vehicle for the established technique. [1]
ChatGPT is a generative artificial intelligence chatbot developed by OpenAI and originally released on November 30, 2022. The platform uses large language models to generate content in response to user prompts. [3]
Security experts noted that the campaign relies on routine user behavior to execute successfully. IBM reported that the operation exposes exploitable gaps in human behavior by using daily digital interactions against targets. [1]
In short
- Hackers are using custom GPTs to execute ClickFix malware campaigns.
- The attacks deliver remote access trojans to targeted systems.
- Cybersecurity firm Huntress first identified the custom GPT abuse campaign.
Sources
Every paragraph above points to the numbered items it rests on. Read the originals here.
- [1]Attackers are using custom GPTs to implement ClickFix attacks in a new RAT campaignIBM, 4h ago (the report this story comes from)
Background
- [2]Custom hardware attack on Wikipedia
- [3]ChatGPT on Wikipedia
- [4]Cross-site request forgery on Wikipedia
- [5]Attackers on Grokipedia
Our newsroom writes these reports with the help of software, from the 5 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.
Related from FTMQ Security
Earlier reports of ours on the same people and subjects.
- Hackers abuse Google Ads and Bing redirects in Claude ClickFix attacksTop Stories, 3d ago
More in Threat Intelligence
- Japan declares first cyberspace emergency following severe automated ransomware attacks1h ago
- AvisLoader Windows Malware Uses Peer to Peer Network to Resist Disruption10h ago
- US Offers Ten Million Dollar Reward for Alleged Hafnium Hacker3d ago
- CISA warns of critical flaws in openPDC and openHistorian software4d ago
- Attackers begin exploiting critical Atlassian file access vulnerability5d ago
- Hackers use Web3 smart contracts to control cloud supply chain malware5d ago
Get the day in one email
Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.
Comments
Loading
Join the conversation
Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.
Already on the list? Enter the same address and we will send a sign-in link.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.