Case chatgpt-feature-clickfix-trojanAI phishingWorldwide
ChatGPT feature abuse paired with ClickFix delivers trojan to users searching via Google
Huntress found a campaign abusing a ChatGPT feature and ClickFix tricks to deliver a potent trojan to users searching for ChatGPT on Google.
MediumAttack using AIStatus: Under investigationVerified case file
Open in the interactive mapCite this case
- Reported
- Oct 14, 2026
- Location
- Worldwide
- Target
- Users searching for ChatGPT via Google
- Severity
- Medium
- Triggered by
- Unknown
- Actor type
- Unknown
- Reported loss
- None reported
- CVE
- None
What happened
Huntress found a campaign abusing a ChatGPT feature and ClickFix tricks to deliver a potent trojan to users searching for ChatGPT on Google.
Impact: Victims who follow the ClickFix steps are infected with a trojan; the number of victims is unknown.
Who triggered it
Actor: Unknown
Attribution: Not attributed in the summary; identified by Huntress researchers.
Motive: Unknown; the campaign delivers trojan malware.
How it happened
Attack vector: Users searching for ChatGPT via Google are lured to abused ChatGPT features, possibly malicious Custom GPTs on OpenAI domains, then ClickFix instructions.
Root cause: Legitimate OpenAI and Google domains and ChatGPT features abused to build user trust.
Timeline
- Reported by Infosecurity Magazine
Response
Unknown
Current status: Under investigation
Sources (open in a new tab)
- Infosecurity Magazine infosecurity-magazine.com
Cite this case
ChatGPT feature abuse paired with ClickFix delivers trojan to users searching via Google. AI Threat Watch, case chatgpt-feature-clickfix-trojan, Oct 14, 2026. https://aithreat.io/cases/chatgpt-feature-clickfix-trojan/
Permanent link: https://aithreat.io/cases/chatgpt-feature-clickfix-trojan/