--- title: Custom ChatGPTs push ClickFix attacks to deploy RAT malware description: Threat actors are abusing OpenAI's custom GPT feature to push ClickFix-style attacks that trick users into running PowerShell commands, ultimately deploying a... canonical: https://daily.dev/posts/custom-chatgpts-push-clickfix-attacks-to-deploy-rat-malware-8lhvrhduw twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Custom ChatGPTs push ClickFix attacks to deploy RAT malware | daily.dev og:description: Threat actors are abusing OpenAI's custom GPT feature to push ClickFix-style attacks that trick users into running PowerShell commands, ultimately deploying a... og:url: https://daily.dev/posts/custom-chatgpts-push-clickfix-attacks-to-deploy-rat-malware-8lhvrhduw og:image: https://api.daily.dev/og/posts/8LhVRHDuw.png og:image:alt: Custom ChatGPTs push ClickFix attacks to deploy RAT malware og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Custom ChatGPTs push ClickFix attacks to deploy RAT malware **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary Threat actors are abusing OpenAI's custom GPT feature to push ClickFix-style attacks that trick users into running PowerShell commands, ultimately deploying a remote access trojan (RAT). Huntress researchers found a malicious GPT named 'Plus 5.6' that redirected victims to a fake Google Sites page with a bogus Cloudflare check, leading to installation of a signed application paired with a malicious DLL loader. The RAT enables remote desktop access, audio/camera capture, and file searches, and persists via a Windows Registry Run key and scheduled task both named 'Canon Configuration Reader.' OpenAI removed the first malicious GPT by September 25, but a second one tied to the same campaign was found active as of September 27. OpenAI plans to retire custom GPTs entirely on December 11. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is a ClickFix attack and how does it deliver malware through ChatGPT? A ClickFix attack tricks victims into manually running a malicious command, often by faking an error or verification screen. In this campaign, a custom GPT named 'Plus 5.6' redirected users to a Google Sites page showing a fake Cloudflare check that instructed them to run a PowerShell command, which installed a malicious MSI, a signed application, and a modified DLL loading a remote access trojan. _Security teams tracking ClickFix and social-engineering malware trends can follow ongoing coverage on daily.dev._ ### How do attackers persist a RAT on a compromised Windows machine using a fake Canon name? Attackers create a Windows Registry Run key and a scheduled task, both named 'Canon Configuration Reader,' to relaunch the remote access trojan after reboot or if deleted. The malware also runs largely in memory or through files that appear benign, and defenders can detect it through process activity monitoring, unusual signed-app folder locations under %LOCALAPPDATA%\Programs\, and reappearing Run keys or tasks. _Defenders hardening persistence detection can compare notes on RAT indicators via daily.dev._ ## Similar posts on daily.dev - [HackedGPT: Novel AI Vulnerabilities Open the Door for Private Data Leakage](https://daily.dev/posts/hackedgpt-novel-ai-vulnerabilities-open-the-door-for-private-data-leakage-v1llnf112) · Security Boulevard · 0 upvotes · 0 comments - [ChatGPT share links abused to host fake outage pages to deliver malware](https://daily.dev/posts/chatgpt-share-links-abused-to-host-fake-outage-pages-to-deliver-malware-h2gq8yzz2) · BleepingComputer · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#malware](https://daily.dev/tags/malware), [#chatgpt](https://daily.dev/tags/chatgpt) [View this post on daily.dev](https://daily.dev/posts/custom-chatgpts-push-clickfix-attacks-to-deploy-rat-malware-8lhvrhduw) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Custom ChatGPTs push ClickFix attacks to deploy RAT malware","url":"https://daily.dev/posts/custom-chatgpts-push-clickfix-attacks-to-deploy-rat-malware-8lhvrhduw","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/custom-chatgpts-push-clickfix-attacks-to-deploy-rat-malware-8lhvrhduw"},"datePublished":"2026-09-29T21:01:42.628Z","dateModified":"2026-09-30T21:31:26.695Z","description":"Threat actors are abusing OpenAI's custom GPT feature to push ClickFix-style attacks that trick users into running PowerShell commands, ultimately deploying a...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5a540b4efa72b578fe86b10274677e3a?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5a540b4efa72b578fe86b10274677e3a?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/custom-chatgpts-push-clickfix-attacks-to-deploy-rat-malware-8lhvrhduw","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,malware,chatgpt","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Custom ChatGPTs push ClickFix attacks to deploy RAT malware"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/custom-chatgpts-push-clickfix-attacks-to-deploy-rat-malware-8lhvrhduw#faq","mainEntity":[{"@type":"Question","name":"What is a ClickFix attack and how does it deliver malware through ChatGPT?","acceptedAnswer":{"@type":"Answer","text":"A ClickFix attack tricks victims into manually running a malicious command, often by faking an error or verification screen. In this campaign, a custom GPT named 'Plus 5.6' redirected users to a Google Sites page showing a fake Cloudflare check that instructed them to run a PowerShell command, which installed a malicious MSI, a signed application, and a modified DLL loading a remote access trojan. Security teams tracking ClickFix and social-engineering malware trends can follow ongoing coverage on daily.dev."}},{"@type":"Question","name":"How do attackers persist a RAT on a compromised Windows machine using a fake Canon name?","acceptedAnswer":{"@type":"Answer","text":"Attackers create a Windows Registry Run key and a scheduled task, both named 'Canon Configuration Reader,' to relaunch the remote access trojan after reboot or if deleted. The malware also runs largely in memory or through files that appear benign, and defenders can detect it through process activity monitoring, unusual signed-app folder locations under %LOCALAPPDATA%\\Programs\\, and reappearing Run keys or tasks. Defenders hardening persistence detection can compare notes on RAT indicators via daily.dev."}}]} ```