Custom ChatGPTs in Google ads push ClickFix attacks to deploy RAT

Threat actors promoted a custom GPT named 'Plus 5.6' in sponsored Google results, redirecting users to a fake Cloudflare check that ran a PowerShell command to install malware. Huntress investigated at least 40 incidents; OpenAI removed the first GPT on September 25, while a second stayed active. OpenAI plans to retire custom GPTs on December 11.

• Custom GPT 'Plus 5.6' in Google ads led to a fake Cloudflare check
• PowerShell command installed an MSI with a signed app and malicious DLL
• The RAT enables remote desktop, camera and audio capture, file searches
• Huntress investigated at least 40 incidents, confirming two custom GPT cases