Malicious ChatGPT GPTs Lure Users to RAT via Fake CAPTCHA
Attackers use sponsored Google ads to promote malicious Custom GPTs on chatgpt.com. The GPT directs users to a fake Cloudflare CAPTCHA page that delivers a ClickFix attack. Users are tricked into pasting commands into their terminal, installing a Remote Access Trojan.
Choose the option closest to your current judgment.
Known and confirmed
- Attackers use sponsored Google ads to promote malicious Custom GPTs on chatgpt.com.
- The GPT directs users to a fake Cloudflare CAPTCHA page that delivers a ClickFix attack.
- Users are tricked into pasting commands into their terminal, installing a Remote Access Trojan.
Unknown or unverified
Original sources
1 sourcesYour choice
Take a stand alongside AI
When faced with such phishing attacks leveraging trusted platforms, what is the most effective personal defense底线?
Comparison standard: Choose the option closest to your current judgment.