Hackers are abusing ChatGPT’s Custom GPT feature to impersonate AI products and trick users into installing a sophisticated remote access trojan (RAT), according to Huntress researchers.

CERT-UA found 100+ compromised sites using ClickFix lures to distribute LunexStealer to Windows search visitors.

Over 100 hacked websites used fake Cloudflare checks to trick visitors into installing LunexStealer through ClickFix commands.

Fresh Windows installs often ship with apps most people never open, and some quietly keep running in the background. You can ...

Security firm Huntress has reported a new attack campaign exploiting ChatGPT's custom GPT feature to infect users with remote access trojans ...

Ukraine’s Computer Emergency Response Team, discovered more than 100 compromised websites in September 2026 distributing LUNEXSTEALER ...

ChatGPT malware campaign plants a fake model on OpenAI's real chatgpt.com, directing Windows users to a ClickFix PowerShell ...

Custom variants of OpenAI's ChatGPT promoted in sponsored Google results are directing unsuspecting users to malicious sites ...

Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting ...

Attackers abused fake ChatGPT Custom GPTs and ClickFix to deliver a multi-stage RAT, hiding payloads behind signed software.

Advances in technology have given us more powerful and versatile scripting languages, such as PowerShell and JavaScript. These languages offer broader capabilities and are better suited for modern web ...

AgtaBackup RAT uses fake Microsoft Store pages and legitimate RMM tools to gain covert remote access to Windows systems.