# This new ChatGPT scam tricks you into installing malware

> **Open Intelligence Dossier** · First detected: 2026-10-03 16:20 UTC · Category: Technology

## Executive Summary
A malicious custom GPT on chatgpt.com is tricking users into installing Remote Access Trojan (RAT) malware via ClickFix attacks.

## Intelligence Brief
A new cybersecurity threat has emerged involving a fake version of ChatGPT that is being used to distribute malware. According to reports from Help Net Security and BleepingComputer, a malicious Custom GPT hosted directly on chatgpt.com is luring users into a trap. This specific scam utilizes what is known as ClickFix attacks to deploy a Remote Access Trojan, commonly referred to as a RAT. This type of malware is designed to grant unauthorized actors the ability to take control of a victim's computer remotely, as noted in coverage from Diario AS. Multiple technology and security outlets are tracking the development of this threat.


BleepingComputer explicitly identifies the method of delivery as the deployment of RAT malware through custom ChatGPTs. Help Net Security emphasizes that the malicious GPT is residing on the official chatgpt.com domain, which may increase the likelihood of users trusting the interface. Meanwhile, ZDNET is reporting on the broader nature of the scam and how it tricks unsuspecting users into installing the harmful software on their local machines. This development is significant because it weaponizes the custom GPT feature to bypass traditional user suspicions. Diario AS reports that the fake ChatGPT has managed to sneak into Google, highlighting the reach of the scam's visibility.


The use of ClickFix attacks represents a specific technical strategy to manipulate users into executing the malware. By leveraging a trusted platform like OpenAI's chatgpt.com, the attackers are able to target a wide demographic of users who utilize artificial intelligence for daily tasks. Future monitoring will focus on how the scam continues to operate and whether more custom GPTs are found utilizing these RAT deployment methods. The coverage from ZDNET, BleepingComputer, Help Net Security, and Diario AS suggests that the primary risk remains the installation of the RAT, which allows for the total takeover of a computer. Users are cautioned about the risks associated with third-party custom GPTs that prompt the installation of external software or provide suspicious links intended to fix perceived errors.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| Diario AS | A fake ChatGPT sneaks into Google and can take control of your computer: Here’s how the scam works | [Source Link](https://news.google.com/rss/articles/CBMi2gFBVV95cUxOcmxIRkZfQURzNXNqQUlCaEpMdTkxVEpiTXdzQmZpZEhxb1lET1FSY3N0UjZIVlI3ZXhCY1poUGtkMDBHMjZnM0pUSXVBZUJiaTBtYWk3WE5FNEtWckdaaDR4V25iVjhodmNEMUZyY1k3cUxIZnlvSHB3cDZocGpReERfMEMyZEVzRUJETjBVUXQ2SXg2OGFYNTNDWDFSN2Z0d0ZkZDFGMnZTczRTSFB2TWZFRnFIV1R1Z0FTMFVmUHk1eHB1OVZRaWt1dGY2Y3J6c2RCR05ER1ZpUdIB7gFBVV95cUxNaEM4TEhXeG1VQU9odUZELWJQMEZBeGpXTnhQdk1mQzJUTlRvcmVleWtDa1h0blpaVGI3ZjJlRWU0dU1OVFBQVllQLXVKNEpVUUdfd3RRaG9pX1U3Z3RwZkhBcEhvUTZSSjlPQmtrVzZOeERUYUZrbl8) |
| BleepingComputer | Custom ChatGPTs push ClickFix attacks to deploy RAT malware | [Source Link](https://news.google.com/rss/articles/CBMiqwFBVV95cUxOcXhTcGRsenptdUJyN2dQTVRJUVh2VC1rMk94dU1RdG5KSkhWNWtiT2hDS3J3QXVRYVJJSVllOFNUMlh2S0RXV0JoMGpwd0pJaDJyVlVJVnpyVjRzVlVDY0g1TU9VZGFmVWNOeERodkx5ZXM4ZUUtNEZBekNpb3RYUEY0cnFERm80b2lDQ3FKRlI5VDUtbHpfU2ZtYW0yU0gyQ1NFRjBZS1QtOEHSAbABQVVfeXFMTmNiMWpGdUdaMDJNUFQza19wMTRnZ1dERDhOck5rWWlwYllETmdqdS1vSnkzdzRkM0hETl96X0kzcy1RbFhzMlp1b0JlVUMwUUxGUVNiNDltdlo1ZlhqaFJrZllRcEZ2ZVJ6OUZWbnBWTVZ4UkN4Y1BZWmlGT0lzZlN2eE9UQVczLWUzeGJYNE95YklvUV9sVUx6dXcxT0dOSG9vbkZPald) |
| Help Net Security | Malicious Custom GPT on chatgpt.com lures users into installing a RAT | [Source Link](https://news.google.com/rss/articles/CBMimAFBVV95cUxPYk9Lck53VFRMRWJJV2doYncwUWZhLUpHcXM2OFBrZC14c2VQcGh3VlJmSV9PMF8wRlFaaTZDdU5ZUi1oMS04U1hZWHloYWhMRGxHVEI1ZGJ2RnExcXIyMU5FUHJDZ0wtYUJnVEV6SzY4SHpJNDg5Mzd2aXhYMEpNMnhRVTM0WGlpMEktV1QwMXJIb3E2Y1VkUw?oc=5) |
| ZDNET | This new ChatGPT scam tricks you into installing malware – how to spot the trap | [Source Link](https://news.google.com/rss/articles/CBMia0FVX3lxTE1qWEhPZWhWa2d6ZjRBX3pHb0FuNnl0Sm5UTkhEQTJ6UnFGSzJZVkl4UWNmdWNtSlRRRkh4cmdVVzMwSzdPQWdNTGx3aUpiVmRBLU9QWnBnalFYMUlXWW0xOU5xNkFOWk5KU1B3?oc=5) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-10-03/this-new-chatgpt-scam-tricks-you-into-installing-malware*