Hiding in plain sight: Fake GPTs, SMTP malware and NetScaler zero-days
Community Score: 50% | 3 views | 1w
0 community ratings: null thumbs up, null thumbs down
Visit Security Intelligence podcast page to get more cybersecurity content → https://ibm.biz/~u3JW3XeWL That ChatGPT ad might not be from OpenAI. On episode 54 of Security Intelligence, Michelle Alvarez, Giacomo Casoni and Norman Dorsch join our new host Patrick Austin for imposter week: three stories about attackers posing as something you trust. First, attackers bought sponsored search ads that led to a fake “Plus 5.6” Custom GPT, which steered at least 40 victims toward a ClickFix page and a remote access trojan. The panel digs into why ClickFix keeps working, and whether AI companies should police their GPT marketplaces the way app stores do. Then: Rapid7 found Linux backdoors, including a new BPFDoor variant and a RAT called AVERAT, hiding on the appliances that screen companies’ email. From there, attackers can see an organization's mail traffic, and their own traffic blends right in. How do you catch an imposter that looks exactly like your security tools? Finally, suspect
Tags: IBM
More from IBM Technology
- Cybersecurity Architecture: Five Principles to Follow (and One to Avoid) — Score: 50%
- What is Multimodal RAG? Unlocking LLMs with Vector Databases — Score: 50%
- AI Privilege Escalation: Agentic Identity & Prompt Injection Risks — Score: 50%
- Better Instructions, Better AI Results — Score: 50%
- Copilot usage reveals AI adoption patterns — Score: 50%
- Claude Opus 4.6 Security Risks — Score: 50%