ClickFix

Security researchers report a malicious ChatGPT Custom GPT being used to push a remote access trojan through the ClickFix social engineering technique, which tricks users into running commands themselves. The finding highlights how attackers are abusing OpenAI's custom GPT ecosystem as a delivery vector, raising fresh concerns about moderation and vetting of third-party GPTs.