Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure

Threat actors are using legitimate domains from OpenAI and Google in a malicious campaign to deceive users. The attackers are abusing these domains to lure victims into a trap, leveraging the popularity of ChatGPT. This campaign is similar in style to previous ClickFix campaigns. The goal of the campaign is to deliver remote access trojans, or RATs, to unsuspecting users. Legitimate services are being exploited to make the malicious activity appear more trustworthy.