{"slug": "malicious-custom-gpt-on-chatgpt-com-lures-users-into-installing-a-rat", "title": "Malicious Custom GPT on chatgpt.com lures users into installing a RAT", "summary": "A malicious ChatGPT Custom GPT named \"Plus 5.6\" is being promoted through sponsored Google results to redirect users to a fake Cloudflare CAPTCHA page that installs a remote access trojan (RAT), according to Huntress. The Huntress SOC has responded to at least 40 incidents tied to the specific Google Sites domain used in the campaign, and confirmed two of those incidents involved the RAT payload.", "body_md": "Malware peddlers are using sponsored Google results to push a malicious ChatGPT Custom GPT named “Plus 5.6,” created to lead users to a fake Cloudflare CAPTCHA check and, ultimately, make them download and run a remote access trojan (RAT). “The campaign has impacted dozens of users: the Huntress SOC has responded to at least 40 incidents stemming from the specific Google Sites domain involved in this attack, and confirmed that two of these incidents came … [More](https://www.helpnetsecurity.com/2026/09/29/malicious-chatgpt-custom-gpt-malware-via-clickfix/) \n\nThe post [Malicious Custom GPT on chatgpt.com lures users into installing a RAT](https://www.helpnetsecurity.com/2026/09/29/malicious-chatgpt-custom-gpt-malware-via-clickfix/) appeared first on [Help Net Security](https://www.helpnetsecurity.com).", "url": "https://wpnews.pro/news/malicious-custom-gpt-on-chatgpt-com-lures-users-into-installing-a-rat", "canonical_source": "https://www.helpnetsecurity.com/2026/09/29/malicious-chatgpt-custom-gpt-malware-via-clickfix/", "published_at": "2026-09-29 11:55:25+00:00", "updated_at": "2026-09-29 12:17:40.799313+00:00", "lang": "en", "topics": ["ai-safety", "ai-products", "generative-ai"], "entities": ["ChatGPT", "Plus 5.6", "Huntress", "Google", "Cloudflare", "Google Sites"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/malicious-custom-gpt-on-chatgpt-com-lures-users-into-installing-a-rat", "markdown": "https://wpnews.pro/news/malicious-custom-gpt-on-chatgpt-com-lures-users-into-installing-a-rat.md", "text": "https://wpnews.pro/news/malicious-custom-gpt-on-chatgpt-com-lures-users-into-installing-a-rat.txt", "jsonld": "https://wpnews.pro/news/malicious-custom-gpt-on-chatgpt-com-lures-users-into-installing-a-rat.jsonld"}}