Huntress

Security firm Huntress reports that threat actors are abusing ChatGPT custom GPTs to deliver a remote access trojan using the ClickFix social engineering technique. Victims are tricked into running malicious commands under the guise of legitimate AI tools, infecting their machines. Security researchers are sharing the findings and warning users to be cautious of fake AI-related tools and instructions.