Artificial Intelligence · Cybersecurity
Attackers use ChatGPT Custom GPTs for ClickFix RAT delivery
Huntress said attackers used attacker-made ChatGPT Custom GPTs, a Google Sites lure and a ClickFix chain in late September 2026 to install a RAT, with at least 40 users affected.
- Huntress said attackers used attacker-created Custom GPTs on ChatGPT to send victims to a Google Sites link.
- The link led to a ClickFix page and a malicious PowerShell command that installed ISOSimple.msi.
- Huntress said ISOSimple.msi used COTFileReadApp.exe, ceiinfolog.dll and rdCore.dll to reach payloads in Common.Integrator.Preview.wav and monitor.raw.
- The trojan could collect system details, start remote desktop sessions, capture camera, microphone and audio input, search files and drop more payloads.
- Huntress said at least 40 users were infected, and the RAT found its command server through DNS-over-HTTPS via Cloudflare, Google and Quad9.
Huntress said attackers used ChatGPT Custom GPTs to guide victims to a Google Sites page. One of the lures was called Plus 5.6, and it presented itself as a service notice before leading into a ClickFix-style prompt.
Victims who followed the prompt were shown a malicious PowerShell command and then an installer named ISOSimple.msi. Huntress said that package relied on COTFileReadApp.exe and a modified Canon DLL, ceiinfolog.dll, to load rdCore.dll.
That DLL extracted an encrypted loader from Common.Integrator.Preview.wav, while another stage sat in monitor.raw. The loader also carried out anti-analysis checks and tried to evade detection.
Huntress said the trojan could list antivirus software, open remote desktop sessions, capture camera, microphone and audio input, search files, and launch extra payloads. It said at least 40 users had been infected, and that the RAT used DNS-over-HTTPS through Cloudflare, Google and Quad9 to find its command server.
The article also said the malware had been seen dropping GOMCam2024.exe, which opened Google Chrome with a temporary profile.
Named in this story
Companies
- Huntress
- security firm that observed the campaign and described the chain
- one of the DNS-over-HTTPS resolvers used by the RAT
- Cloudflare
- appeared in the fake CAPTCHA and as a DNS-over-HTTPS resolver
- Canon
- signed the binary abused for DLL sideloading
Organisations
- Quad9
- one of the DNS-over-HTTPS resolvers used by the RAT
Products and systems
- ChatGPT
- platform whose Custom GPT feature was abused
- Custom GPTs
- personalised ChatGPT instances used as the lure
- Plus 5.6
- attacker-created Custom GPT used in the lure
- Google Sites
- hosted the malicious link and fake notice page
- COTFileReadApp.exe
- Canon-signed executable used to load a rogue DLL
- ceiinfolog.dll
- altered Canon DLL that loaded rdCore.dll
- rdCore.dll
- unsigned DLL that extracted the encrypted loader
- Common.Integrator.Preview.wav
- WAV file that held the encrypted loader
- monitor.raw
- encrypted file from which the trojan was unpacked
- ISOSimple.msi
- MSI installer dropped by the PowerShell command
- GOMCam2024.exe
- signed binary that launched Chrome with a throwaway profile
- Google Chrome
- browser opened by GOMCam2024.exe
How the source tells it
The source read in a threat-heavy security-news register, with repeated abuse language and a long list of malware capabilities.
- alarm loaded threat verbs, infection counts and a long capability list