Push Security: LLMshare custom GPT and AI-themed malware delivery

Evidence record

First-party investigative write-up of fake Claude installer pages and an independent shared-custom-GPT ClickFix cluster, including screenshots and command-chain analysis.

Read the original source ↗

Claim-level citations (4)

• supportsA shared custom GPT directed visitors to a ClickFix malware lure: Push Security analyzed a Windows ClickFix command that downloaded a remote PowerShell script from a decimal-encoded IP address after a user manually pasted the command into the Run dialog.

  Links to previously reported campaigns, Push command analysis below PowerShell example

• supportsA shared custom GPT directed visitors to a ClickFix malware lure: Push Security observed a shared custom GPT responding to user prompts with a purported service-availability notice linking to a Google Sites ClickFix page.

  Cluster 2: LLMshare, paragraphs describing scripted GPT replies and associated screenshots

• supportsA shared custom GPT directed visitors to a ClickFix malware lure: Push Security connected the naming and command style to earlier Huntress and Island reporting, but those sources described different malware payload chains and do not establish the final payload for every newer GPT lure.

  Links to previously reported campaigns, Huntress/Island payload comparison

• supportsA shared custom GPT directed visitors to a ClickFix malware lure: A screenshot of the observed GPT showed more than 10,000 conversations; Push Security did not establish that this represented 10,000 infections or even 10,000 unique people who executed the payload.

  Cluster 2: LLMshare, caption for 10k+ conversations screenshot