{
  "id": 11499892,
  "title": "This new ChatGPT scam tricks you into installing malware – how to spot the trap",
  "url": "https://urgent.news/2026/10/02/this-new-chatgpt-scam-tricks-you-into-installing-malware-how-to-spot",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-02T18:18:57.000Z",
  "source": {
    "name": "ZDNet",
    "slug": "zdnet",
    "url": "https://www.zdnet.com/innovation/chatgpt-scam-malware-trap/"
  },
  "original_language": "en",
  "account": "A new scam targeting ChatGPT users has recently emerged, aiming to trick individuals into installing malware on their computers. The scam begins when users search for \"ChatGPT\" online and click on a sponsored link that appears to be the actual website. Upon clicking, users are instead taken to a custom GPT, a user-generated ChatGPT version tailored for specific tasks. The primary goal of this scam is to make users believe they are on the legitimate ChatGPT site, thus convincing them to click on a link inside the chat response.\n\nThe response presented by this custom GPT offers an upgrade to a Plus subscription or a link to a backup domain. Clicking on the provided link leads users to a fake Cloudflare verification page, which requests the user to paste and run a malicious command in Windows/PowerShell. Executing this command installs malware on the user's computer.\n\nTo avoid falling victim to this specific scam, users should recognize that a genuine Cloudflare verification check would never ask them to perform any actions on their keyboard. Instead, it might only require them to check a box or press a button. Additionally, users should treat sponsored results as advertisements and links from chatbots with caution, as they might not be trustworthy.\n\nTech professionals, such as Roman Oliinyk, CEO and founder of PayCore Media, Inc., an expert in data-leak protection systems for large US companies, have pointed out that real Cloudflare checks typically don't require any input from the user. Furthermore, Oliinyk recommends being wary of links from chatbots, as one should approach them with the same caution as links from a stranger.\n\nGoogle and OpenAI were contacted for comments on this emerging scam; however, OpenAI has not yet responded.",
  "summary": "This authentic-looking scam starts with a sponsored Google link – and it’s catching people off-guard.",
  "key_points": [
    "Users tricked into installing malware via ChatGPT scam",
    "Custom GPT appears as legitimate ChatGPT site",
    "Malicious command installed by executing fake Cloudflare verification"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}