Security2 hSeptember 30, 2026, 23:10

Hackers host fake ChatGPT model on official site to spread ClickFix malware

Attackers created a custom GPT named "Plus 5.6" on chatgpt.com that redirected victims to a Google Sites page with a fake Cloudflare CAPTCHA. Pasting the suggested code installed the @input RAT, giving attackers remote control of the camera, microphone and files; Huntress handled at least 40 incidents.

TechRadar

Open source

Hackers host fake ChatGPT model on official site to spread ClickFix malware

Custom GPT "Plus 5.6" mimicked an official OpenAI model on the chatgpt.com domain
Fake Cloudflare CAPTCHA led to download of the @input remote access trojan
Huntress responded to at least 40 incidents, dozens of users affected
OpenAI took down the GPT on September 25, a new one appeared two days later

#OpenAI#ChatGPT#Google

Hacked Ukrainian Sites Spread Psychedelic Stealer via Fake Cloudflare ClickFix

Security

CTM360: 17,000 URLs Show How ClickFix Turns Trusted Sites Into Malware Traps

Security

Hacked HBO Reddit Account Used for Malware Delivery via ClickFix Attack

Security

Hackers host fake ChatGPT model on official site to spread ClickFix malware

Hacked Ukrainian Sites Spread Psychedelic Stealer via Fake Cloudflare ClickFix

CTM360: 17,000 URLs Show How ClickFix Turns Trusted Sites Into Malware Traps

Hacked HBO Reddit Account Used for Malware Delivery via ClickFix Attack

Kaspersky uncovers malware campaign spread via movie torrents