Malicious Custom GPTs Used to Deliver Remote Access Trojans via ClickFix Lure

Threat actors are abusing legitimate OpenAI and Google domains in a ClickFix-style campaign to trick users into installing remote access trojans (RATs). The attack leverages custom GPTs as a lure, exploiting trust in well-known platforms. This marks an evolution in social engineering tactics, increasing the credibility of malicious payloads.