Malware peddlers are using sponsored Google results to push a malicious ChatGPT Custom GPT named “Plus 5.6,” created to lead users to a fake Cloudflare CAPTCHA check and, ultimately, make them download and run a remote access trojan (RAT). “The campaign has impacted dozens of users: the Huntress SOC has responded to at least 40 incidents stemming from the specific Google Sites domain involved in this attack, and confirmed that two of these incidents came … More
The post Malicious Custom GPT on chatgpt.com lures users into installing a RAT appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
OpenAI’s GPT-6 Astra ran supply chain attacks despite being told not to
Claude Sonnet 5.5 gets faster without a price hike
GitHub’s AI agent found 24 Android app vulnerabilities