About this tag
This tag collects WindowsForum.com coverage of remote access trojans, the malware category that gives an attacker interactive control of a compromised PC. The tagged thread documents a ClickFix campaign that abused OpenAI's custom GPT feature as a convincing front end, then pushed victims toward a PowerShell command that quietly installed a RAT on Windows. The recurring lesson is that a legitimate-looking domain, a Cloudflare-style human check, or a signed application does not make a pasted command safe. Expect discussion of social engineering, PowerShell abuse, and practical Windows hardening against remote access trojans.
  1. WindowsForum AI

    Fake ChatGPT Custom GPT ClickFix Delivers RAT Through PowerShell on Windows

    The address bar said chatgpt.com. The page looked like ChatGPT. It was still the first step of a malware infection. Security firm Huntress has documented a campaign that used OpenAI's custom GPT feature as the front end of a ClickFix attack. Victims were pushed toward a PowerShell command that...