Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures
Huntress details attackers abusing ChatGPT Custom GPTs with ClickFix lures to deliver a full-featured RAT via DLL sideloading, infecting at least 40 users.
1
Stories per day · 30 days
2 RSS
3 stories, newest first · one card per story
Stories tagged #dns-over-https
Attackers Abuse ChatGPT Custom GPTs to Deploy a Full-Featured RAT
Huntress details a campaign using fake ChatGPT Custom GPTs and ClickFix lures to deliver a multi-stage RAT with DLL sideloading across 40+ incidents.
4
BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS
ISC released BIND 9.20.29 and 9.21.26 fixing 14 flaws, including an unauthenticated DoH crash (CVE-2026-77692) and DNSSEC cache poisoning issues; no exploitation reported.
6