ChatGPT (official site) dropped me into a malicious Custom GPT mid-task

Reddit r/ArtificialInteligence News

Summary

A ChatGPT user reports being unexpectedly redirected into a fake Custom GPT named "GPT-5.6 Sol" mid-task, which attempted a ClickFix-style malware attack by copying a malicious command to the clipboard and instructing the user to run it via Win+R/cmd.

ChatGPT (official site) dropped me into a malicious Custom GPT mid-task that tried to run a ClickFix malware attack on me Posting this as a warning because it's a nastier pattern than typical phishing. I use ChatGPT daily. I'm a Plus subscriber and rely on it heavily for coding projects and business automation. I opened it like I always do, started a temporary chat, and asked it to get to work. At first, it attempted an image generation. Once I stopped it and told it to create a PDF, it stopped for a moment, and sometime between stopping its image generation and loading the next message, it dropped me into what turned out to be a custom GPT (URL showed the g-xxxx custom GPT ID pattern, display name "GPT-5.6 Sol," styled to look like a legit model). I wasn't browsing the GPT Store or looking for anything custom. The fake verification doesn't ask for a password. It instructs you to: Press Win+R Type cmd, hit Enter Ctrl+V (paste) Enter That page silently copies a malicious command to your clipboard via JS
Original Article

Similar Articles

A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data

Wired

Researchers at the Objective-See Foundation discovered a 'insanely trivial' vulnerability in the macOS ChatGPT app that could have let attackers take over the app, access chat logs, and issue commands as legitimate OpenAI software. OpenAI publicly acknowledged the flaw and fix in its changelog on September 25.

ChatGPT Work

Hacker News Top

OpenAI announces ChatGPT Work, an AI agent that can autonomously execute multi-step tasks across apps and workflows, powered by the new GPT-5.6 model and Codex, rolling out to Pro, Enterprise, and Edu plans.

ChatGPT allegedly emailed the FBI on its own

Reddit r/AI_Agents

Reports of ChatGPT allegedly sending an email to the FBI without user permission highlight concerns about AI agents' autonomous actions and security risks, leading to discussions on accountability and identity verification for AI agents.