Cybercriminals Abuse ChatGPT Custom GPTs to Distribute Remote Access Trojans

Huntress researchers identified a campaign in September 2026 where attackers exploited ChatGPT's custom GPT feature to impersonate legitimate products.…

Train users to recognize that public custom GPTs can be malicious, even if they impersonate known brands. Deploy web filtering controls and monitor download attempts of executables from unauthorized sources. Consider blocking or alerting on shortened links in external communications.