ATTACKERS ABUSE CHATGPT CUSTOM GPTS TO DELIVER RAT VIA CLICKFIX

Summary from the TLDR InfoSec newsletter

Sponsored Google results led victims to "Plus 5.6," a Custom GPT on chatgpt.com that answered every prompt with a fake outage notice pointing to a Google Sites ClickFix lure, and Huntress tied at least 40 incidents to the campaign. The eight-stage chain sideloaded malicious DLLs through Canon-signed (later Stardock-signed) binaries, hid its loader inside a WAV file and a NuGet package. It then unpacked a full-featured RAT from a custom encrypted file system that located its C2 over DNS-over-HTTPS. The signed hosts change with each wave, so defenders should detect behaviors instead: PowerShell spawning msiexec on GUID-named MSIs in %TEMP%, signed apps running from fake %LOCALAPPDATA%\Programs folders, and self-restoring Run key and scheduled task pairs, which require killing the process before removing persistence.