GoKawiilFake sponsored Google ads lead ChatGPT users to malware via custom GPT
Researchers have identified a scam that begins with a sponsored Google ad for ChatGPT, which directs users to a custom GPT hosted on OpenAI's real domain. That custom GPT displays a fake 'Service Availability Notice' urging users to either upgrade to Plus or click a 'backup domain' link, the latter of which leads to malware installation. Because the page sits on the genuine chat.openai.com domain and shows the user's logged-in account, the only visible red flag is an unfamiliar model name like 'Plus 5.6.'
GoKawiil's interpretation of the reporting above, not reported fact.
The scam exploits trust in OpenAI's legitimate domain and Google's ad system, making it harder for users to rely on URL-checking as a safety habit. This suggests attackers are increasingly using custom GPTs and ad platforms as vectors, which could pressure OpenAI and Google to tighten review of sponsored links and user-generated chatbots.
- Scam begins with a sponsored Google ad impersonating ChatGPT's real link.
- Victims land on a custom GPT on OpenAI's actual domain displaying a fake outage notice.
- A 'backup domain' link offered in the fake notice leads to malware installation.
Yubico YubiKey 5C NFC — With scams increasingly tricking users into installing malware or handing over credentials via fake login pages, hardware-based authentication is one of the strongest defenses available. A YubiKey adds a physical verification layer to your accounts, so even if you're fooled by a malicious link, attackers still can't get in without your physical key.
See Yubico YubiKey 5C NFC on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: zdnet.com — Artie Beaty, 2026-10-02
Published there as: “This new ChatGPT scam tricks you into installing malware – how to spot the trap”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.