Affected Systems

Users searching for ChatGPT via Google Search who click sponsored results. Campaign leverages OpenAI's custom GPT feature (retiring December 11, 2026) and Google Sites infrastructure. At least 40 incidents observed, with confirmed infections deploying remote access trojan malware on Windows systems.

Exploitation Status

Active exploitation confirmed. Huntress MDR identified at least 40 incidents with two confirmed custom GPT variants ('Plus 5.6' and successor). OpenAI removed first malicious GPT on September 25, 2026; second variant was still active as of September 27. Attackers have iterated techniques, switching from Canon-signed to Stardock-signed host applications.

Business Impact

Users clicking malicious sponsored Google ads are redirected to fake Cloudflare verification pages instructing them to run PowerShell commands. Successful execution installs a full-featured RAT with remote desktop access, audio/camera capture, file search, reconnaissance, and payload delivery capabilities. Malware achieves persistence via Windows Registry Run keys and scheduled tasks (named 'Canon Configuration Reader'). Attack chain uses legitimate signed binaries, DLL sideloading, and custom encrypted file systems to evade detection. Most execution occurs in-memory, complicating forensic analysis.

Urgency

🟠 Within 24 hours

Recommended Actions

  • Block user execution of PowerShell commands from browser downloads; enforce PowerShell Constrained Language Mode or application whitelisting via AppLocker/WDAC
  • Monitor for msiexec.exe silent installations from %TEMP% directories and signed executables launching from unusual paths under %LOCALAPPDATA%\Programs\
  • Hunt for Registry Run keys and scheduled tasks named 'Canon Configuration Reader' or similar legitimate-sounding names that reappear after deletion
  • Educate users on ClickFix social engineering tactics, especially fake CAPTCHA or verification prompts requesting PowerShell execution
  • Review Google Ads policies with marketing teams; consider blocking sponsored search results for AI tools at the network perimeter until campaign subsides