Hackers use ChatGPT custom GPTs to run ClickFix social engineering attacks

Techub, citing Crypto Briefing, reported that hackers are using ChatGPT’s custom GPT feature to carry out a social engineering campaign known as ClickFix. The attackers create GPTs that appear to be legitimate services, then use them to steer users toward malicious links or harmful file downloads. The case points to a security gap around how AI platform listings are presented and how related advertising or verification processes are handled. It also highlights a broader issue for AI platforms: tools designed for customization and discovery can be abused when bad actors package malicious prompts or links inside products that look trustworthy. The report did not disclose further technical details, but it framed the incident as a sign that platform safeguards and ad verification checks need to be strengthened.