Attackers are abusing ChatGPT Custom GPT pages to impersonate AI product offerings and push victims into a Windows malware installation chain. In a late-September 2026 investigation, Huntress said users were led from a ChatGPT-hosted Custom GPT named Plus 5.6 to a Google Sites page posing as a backup access or verification flow, then into a ClickFix prompt that told them to run PowerShell and install a malicious MSI.
Continue reading
The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.
Already purchased? Sign in✓ Signed in — this article isn’t included in your current plan.
Unlocking the full article...
Contact us
Questions, corrections, or ideas? Send us a message here. We aim to reply by email within 24 hours.
Thank you. Your message has been sent. We aim to reply by email within 24 hours.Please enter your email address and a message.We could not send your message. Please try again in a little while.