Hackers Use ChatGPT Custom GPTs in ClickFix Attacks

Hackers are leveraging ChatGPT Custom GPTs to conduct ClickFix attacks, using these personalized AI tools to impersonate legitimate products and trick users into executing malicious code. The campaign has already infected at least 40 users, with the threat actors employing a multi-stage infection chain involving AI-powered social engineering and sophisticated malware techniques. The threat actors have switched to a Stardock executable and a patched Stardock DLL for infection, and placed the loader in a Microsoft NuGet package instead of an audio file.