“Experiencing limited availability on the primary domain” is the message a malicious custom GPT called Plus 5.6 showed to ...

A TerminalFix intrusion campaign that uses ClickFix-style social engineering, PowerShell execution, DLL sideloading, and a ...

Cisco Talos has uncovered a China-nexus cyber-espionage campaign that compromised approximately 350 endpoints across eight ...

Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting ...

ChatGPT malware campaign plants a fake model on OpenAI’s real chatgpt.com, directing Windows users to a ClickFix PowerShell lure that delivers an 8-stage remote access trojan with full surveillance ...

Attackers abused fake ChatGPT Custom GPTs and ClickFix to deliver a multi-stage RAT, hiding payloads behind signed software.

A China-linked threat actor has spent nearly a year running a modular espionage implant called NeedyMantis inside the ...

NeedyMantis uses a DLL sideloading technique, where a malicious DLL file, often disguised with a legitimate program's file ...

The personalized versions of ChatGPT were used to impersonate legitimate products and trick users into executing PowerShell ...

At least 40 victims were impacted by the ClickFix attack, with two intrusions confirmed to have originated from the Custom ...

Threat actors are abusing ChatGPT’s Custom GPT feature to funnel victims into a ClickFix attack that ends with a ...

Microsoft has analyzed NeedyMantis, the malware used by the Chinese hackers behind the Daemon Tools supply chain attack.