Hackers Use ChatGPT Custom GPTs in ClickFix Attacks
A newly discovered ClickFix campaign is relying on ChatGPT Custom GPTs to impersonate legitimate products and lure victims into executing malicious code on their machines.
Custom GPTs are personalized versions of ChatGPT that may include specific instructions and tools. They are hosted on ChatGPT.com, and their pages feature their custom names at the top, along with the builder’s profile.
As part of the malicious campaign, a threat actor programmed two Custom GPTs to respond to users’ prompts with a Google Sites link leading to a ClickFix page, cybersecurity firm Huntress reports.
On this page, visitors were instructed to execute PowerShell commands that downloaded a malicious MSI file as part of a multi-stage infection chain.
According to Huntress, at least 40 users have been infected as part of the campaign, and at least two of the incidents are connected to a Custom GPT instance. OpenAI took down the Custom GPT...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
